Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by sar77 through our website (sar77.cam), mobile-optimized platforms, customer support channels, and any other services we provide. sar77 operates as an online gaming platform serving players in Indonesia, offering sports betting, live casino games, slot machines, togel (Indonesian lottery), and related entertainment services.

This policy is designed to comply with international data protection standards including the General Data Protection Regulation (GDPR) principles, while respecting Indonesian privacy norms and expectations. We recognize that Indonesian players entrust us with sensitive personal and financial information, and we take this responsibility with utmost seriousness.

By creating an account, making deposits, placing bets, or otherwise using sar77 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this policy, you must discontinue use of our services immediately.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a sar77 account, we collect personal information you provide including:

• Identity Information: Full legal name (as appears on your Indonesian KTP identification card), date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and province.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay account numbers), and transaction history including deposits, withdrawals, and gaming activity.
• Verification Documents: Copies of your Indonesian KTP, proof of address documents (utility bills, bank statements), selfie photographs, and any additional documents required for KYC (Know Your Customer) compliance and anti-fraud verification.
• Communication Records: Customer support chat logs, email correspondence, phone call recordings (with your consent), and any feedback or complaints you submit.

2.2 Information Collected Automatically

When you access sar77 services, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and unique device identifiers.
• Connection Information: IP address, internet service provider, geographic location data (country, region, city derived from IP address), and time zone.
• Usage Data: Pages visited, games played, bets placed, session duration, clickstream data, referral sources, and interaction patterns with our platform.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user preferences, maintain login sessions, prevent fraud, and improve user experience. See our Cookie Policy section for detailed information.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection signals from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Results from identity verification and anti-fraud database checks performed by specialized third-party verification providers.
• Game Providers: Game session data, betting patterns, and win/loss records from our game studio partners (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.).
• Marketing Partners: If you arrive at sar77 through an affiliate link or marketing campaign, we may receive referral information and campaign tracking data.

3. How We Use Your Personal Information

sar77 collects and processes your personal information for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Verifying your identity and age (21+ requirement) to comply with legal obligations
• Processing deposits, withdrawals, and financial transactions
• Providing access to games, sports betting markets, and platform features
• Maintaining gaming history, transaction records, and account balances
• Responding to your inquiries and providing customer support

3.2 Security, Fraud Prevention, and Legal Compliance

• Detecting and preventing fraud, money laundering, collusion, and other illegal activities
• Monitoring for suspicious betting patterns and account abuse
• Conducting KYC (Know Your Customer) verification as required by international anti-money laundering standards
• Enforcing our Terms and Conditions and preventing prohibited activities
• Complying with legal obligations, court orders, and regulatory requirements
• Protecting sar77's rights, property, and safety, as well as those of our users and third parties

3.3 Service Improvement and Analytics

• Analyzing user behavior and preferences to improve platform functionality
• Testing new features and optimizing user experience
• Conducting market research and understanding Indonesian player preferences
• Generating aggregated statistics and reports (anonymized data with no personal identifiers)
• Improving game selection based on popularity and user engagement

3.4 Marketing and Communications

• Sending promotional offers, bonus notifications, and special campaigns (with your consent)
• Communicating important account updates, security alerts, and platform changes
• Providing personalized game recommendations based on your playing history
• Sending transactional emails (deposit confirmations, withdrawal notifications, password resets)

You can opt out of promotional communications at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in account settings. Note that you cannot opt out of essential transactional and security-related communications.

3.5 Responsible Gaming and Player Protection

• Monitoring gaming activity to identify signs of problem gambling behavior
• Enforcing deposit limits, loss limits, and self-exclusion requests you have set
• Providing support resources and intervention when problematic patterns are detected
• Complying with our Responsible Gaming commitments to protect vulnerable players

4. How We Share Your Information

sar77 does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for legitimate business purposes:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals.
• Game Providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and others receive limited data (user ID, bet amounts) necessary to operate games and maintain session state.
• Identity Verification Services: Third-party KYC providers receive identity documents and personal information to verify your age, identity, and comply with anti-money laundering regulations.
• Customer Support Tools: Live chat providers and customer support platforms process communication data to facilitate support interactions.
• Cloud Hosting Providers: Secure server infrastructure providers host our platform and databases under strict data processing agreements.

All service providers are contractually obligated to process your data only for specified purposes, maintain confidentiality, and implement appropriate security measures. They are prohibited from using your personal information for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or government authorities when:

• Required by law, regulation, legal process, or government request
• Necessary to investigate, prevent, or take action regarding suspected illegal activities or fraud
• Required to enforce our Terms and Conditions or protect our legal rights
• Necessary to protect the safety and security of sar77, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy proceeding involving sar77, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and platform notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties not listed above if you provide explicit consent for such sharing. You can withdraw consent at any time by contacting our support team.

5. Data Security Measures

sar77 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and sar77 servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, financial information) is encrypted using AES-256 encryption.
• Firewall Protection: Multi-layered firewall systems prevent unauthorized network access to our servers and databases.
• Intrusion Detection: Real-time monitoring systems detect and block suspicious activity, hack attempts, and security threats.
• Secure Password Storage: Passwords are never stored in plain text; we use industry-standard bcrypt hashing with salt to protect your credentials.
• Two-Factor Authentication: Optional 2FA adds an extra layer of security requiring a verification code in addition to your password.

5.2 Organizational Safeguards

• Access Controls: Strict role-based access ensures only authorized personnel can access personal data on a need-to-know basis.
• Employee Training: All staff receive regular training on data protection, privacy best practices, and security protocols.
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of user information.
• Security Audits: Regular third-party security audits and penetration testing identify and address vulnerabilities.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches.

5.3 Your Responsibility

While sar77 implements robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password not used on other websites
• Never share your password, security questions, or account credentials with anyone
• Log out after each session, especially on shared or public devices
• Enable two-factor authentication if available
• Keep your email account secure, as it can be used for password recovery
• Report suspicious activity or unauthorized access immediately to [email protected]

Please note that no method of internet transmission or electronic storage is 100% secure. While we strive to protect your personal information using industry best practices, we cannot guarantee absolute security.

6. Your Privacy Rights and Choices

You have the following rights regarding your personal information held by sar77:

6.1 Right to Access

You have the right to request a copy of all personal information we hold about you. This includes account details, transaction history, gaming activity, and communications. We will provide this information in a structured, commonly used format within 30 days of your request.

6.2 Right to Correction

If any personal information we hold is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly in your account settings, or contact support for assistance with corrections requiring verification.

6.3 Right to Deletion

You can request deletion of your personal information, subject to certain exceptions. We must retain some data to comply with legal obligations (financial records, KYC documents, transaction logs for anti-money laundering compliance typically 5-7 years). Once legal retention periods expire, we will delete or anonymize your data upon request.

6.4 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format (typically CSV or JSON) and transmit it to another service provider. This includes account information, gaming history, and transaction records.

6.5 Right to Restrict Processing

You can request that we limit how we use your personal information in certain circumstances, such as when you contest the accuracy of data, or when processing is no longer necessary but you want us to retain the data for legal claims.

6.6 Right to Object

You can object to processing of your personal information for direct marketing purposes at any time. You can also object to processing based on legitimate interests by providing specific reasons related to your particular situation.

6.7 Right to Withdraw Consent

Where we rely on your consent to process personal information (such as marketing communications), you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

6.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] or via live chat, providing:

• Your full name and sar77 username
• The specific right you wish to exercise
• Any relevant details or documentation

We will respond within 30 days and may request identity verification to protect your privacy. There is no charge for most requests, though we may charge a reasonable fee for excessive, repetitive, or manifestly unfounded requests.

7. Cookies and Tracking Technologies

sar77 uses cookies and similar tracking technologies to improve your experience, maintain login sessions, analyze usage patterns, and prevent fraud.

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They contain information that can be read by our servers on subsequent visits.

7.2 Types of Cookies We Use

• Essential Cookies: Necessary for basic platform functionality, login sessions, security features, and maintaining your preferences. These cannot be disabled without breaking core features.
• Performance Cookies: Collect anonymous usage statistics to understand how visitors interact with our platform, which pages are most popular, and where errors occur.
• Functional Cookies: Remember your preferences (language, currency display, game favorites) to personalize your experience.
• Advertising Cookies: Track your activity across websites to deliver relevant promotional content and measure campaign effectiveness (used only if you consent).

7.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can block or delete cookies, though this may impact platform functionality. Note that essential cookies cannot be disabled without affecting your ability to use sar77 services.

8. International Data Transfers

sar77 operates internationally and may transfer your personal information to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard contractual clauses approved by data protection authorities
• Service provider certifications demonstrating adequate data protection practices
• Encryption during transmission and storage
• Access controls limiting who can view your data

By using sar77 services, you consent to the transfer of your information to countries that may have different data protection standards than Indonesia, with the understanding that we maintain strong security regardless of location.

9. Data Retention Periods

sar77 retains personal information only as long as necessary for the purposes outlined in this policy and to comply with legal obligations:

• Account Information: Retained for the lifetime of your active account, plus 7 years after account closure for legal compliance and dispute resolution.
• Transaction Records: Retained for 7 years after the transaction to comply with financial regulations and anti-money laundering requirements.
• KYC Documents: Retained for 7 years after account closure as required by anti-money laundering regulations.
• Gaming History: Retained for 5 years to resolve disputes, detect fraud, and comply with gaming regulations.
• Communications: Customer support communications retained for 3 years; marketing communications retained until you unsubscribe.
• Technical Logs: Server logs and security data retained for 12 months for security monitoring and troubleshooting.

After retention periods expire, we securely delete or anonymize your data so it can no longer identify you personally.

10. Children's Privacy Protection

sar77 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If you are under 21, you must not use our services or provide any personal information to us.

If we discover that we have collected information from someone under 21, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided information to sar77 should contact us immediately at [email protected].

We recommend parents and guardians use parental control software to prevent minors from accessing gambling websites.

11. Changes to This Privacy Policy

sar77 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services offered. When we make material changes, we will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you via email to your registered email address
• Display a prominent notice on our platform

We encourage you to review this Privacy Policy periodically. Continued use of sar77 services after changes take effect constitutes your acceptance of the updated policy. If you do not agree with changes, you must discontinue use and may request account closure.

12. Contact Information and Questions

If you have questions, concerns, or complaints about this Privacy Policy or how sar77 handles your personal information, please contact us:

• Email: [email protected]
• WhatsApp: +62 812 3456 7890
• Live Chat: Available 24/7 on our website

Our customer support team is available 24/7 to assist with privacy-related inquiries. For formal data protection requests (access, deletion, correction), please email us with "Privacy Request" in the subject line and include your full name, username, and specific request details.

We aim to respond to all privacy inquiries within 5 business days and resolve requests within 30 days.