uss77 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual — including name, phone number, email address, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Player" means any individual who has registered for and holds a valid Account on the uss77 Platform, or who otherwise interacts with the Platform (including visitors who have not yet registered).
• "Platform" means the uss77 website accessible at uss77.bio and all associated services, mobile interfaces, and communication channels operated by uss77.
• "Controller" means uss77, the entity that determines the purposes and means of processing Personal Data collected via the Platform.
• "Third-Party Processor" means any external organization that processes Personal Data on behalf of uss77 under a contractual data processing agreement — for example, payment service providers, identity verification providers, and game studio partners.
• "KYC" means Know Your Customer — the identity and age verification process required to confirm that a Player is who they say they are and is at least 21 years of age.
• "Cookies" means small text files placed on a Player's device by the Platform, used to maintain session state, analyze usage patterns, and deliver a personalized experience.

uss77 collects Personal Data in the following categories. We collect only what is necessary for the stated purpose — we do not gather data speculatively or beyond operational requirements.

uss77 collects Personal Data through the following channels:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, contacting support via live chat or email, or participating in promotions.
• Automated Platform interactions: Technical and Usage Data collected automatically when you access the Platform, through server logs, session tracking, and first-party cookies (see Section 10).
• Third-party verification providers: Identity and document verification data returned by our KYC partner when you submit identity documents. This data supplements what you provide directly and is used solely for verification purposes.
• Payment processors: Transaction confirmation data returned by Indonesian bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to confirm the status and details of deposits and withdrawals.
• Game studio partners: Aggregated session and wager data provided by licensed game providers such as Pragmatic Play, Evolution Gaming, PG Soft, and Spribe for the purposes of dispute resolution, responsible gaming monitoring, and bonus settlement.

uss77 processes your Personal Data for the following purposes only. We do not process your data for any purpose that is incompatible with those listed here without first notifying you and, where required, obtaining your consent.

• Account creation and management: To register your Account, maintain your profile, authenticate your login sessions, and deliver the full range of Platform services.
• Identity and age verification (KYC): To confirm that you are at least 21 years of age and that the identity you have provided is genuine, as required for responsible operation of the Platform.
• Payment processing: To process deposits credited to your uss77 Wallet and to settle withdrawal requests to your nominated Indonesian bank account or e-wallet.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multiple-account abuse, money laundering, and other prohibited activities as defined in the Terms & Conditions.
• Bonus and promotion administration: To verify eligibility, track wagering turnover, issue promotional credits, and enforce bonus terms consistently and fairly across all Players.
• Responsible Gaming monitoring: To identify behavioral patterns that may indicate problem gambling and to administer self-imposed restrictions such as deposit limits, cool-off periods, and self-exclusion requests.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain a record of interactions for quality assurance and training purposes.
• Legal and regulatory compliance: To meet obligations imposed by applicable international gaming regulations, anti-money-laundering frameworks, and financial crime prevention requirements.
• Platform improvement: To analyze aggregated, anonymized usage patterns to improve the speed, stability, and feature set of the Platform — for the benefit of all Indonesian Players.
• Direct marketing communications: To send you promotional offers, bonus alerts, and Platform news via email or SMS — but only where you have consented to receive such communications, and always with a clearly accessible unsubscribe mechanism.

uss77 processes your Personal Data under one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to fulfill our obligations under the uss77 Terms & Conditions, including Account management, payment processing, and game session delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money-laundering checks, and record-keeping obligations.
• Legitimate interests: Processing in pursuit of uss77's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, Platform security, and service quality improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications and optional personalization features. You may withdraw consent at any time by contacting support or updating your Account preferences.

uss77 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share Personal Data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

6.1 Third-Party Service Providers

We engage carefully vetted third-party processors to help us deliver the Platform. These include: KYC and identity verification providers; payment gateway operators facilitating Indonesian bank and e-wallet transactions; cloud infrastructure and data storage providers; customer support software providers; and fraud detection and analytics platforms. All such providers operate under binding data processing agreements that restrict them from using your data for any purpose other than providing their contracted service to uss77.

6.2 Game Studio Partners

Licensed game studios (including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe) receive limited session and wagering data necessary to deliver their games, resolve technical disputes, and enforce responsible gaming limits within their platforms. These studios are bound by their own internationally regulated licensing conditions, which include strict data protection requirements.

6.3 Legal and Regulatory Disclosures

uss77 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so — for example, in connection with anti-money-laundering investigations, fraud prevention, or court orders. We will notify you of any such disclosure to the extent we are permitted by law to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of uss77's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, the new entity will be bound by commitments no less protective than those in this Privacy Policy, and you will be notified in advance.

As an internationally operated platform serving Indonesian players, uss77 may transfer Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, uss77 ensures that appropriate safeguards are in place — including standard contractual clauses, adequacy decisions, or equivalent international data transfer mechanisms — to ensure that your data receives a level of protection consistent with international best practice.

All data transfers involving Financial Data and KYC Document Data are encrypted in transit using 256-bit TLS encryption, regardless of the geographic destination of the transfer.

uss77 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

When the applicable retention period expires, Personal Data is securely deleted or anonymized so that it can no longer be attributed to any individual. Anonymized, aggregated data (which cannot identify any Player) may be retained indefinitely for statistical and platform improvement purposes.

uss77 implements a layered approach to data security that combines technical, organizational, and procedural controls to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure.

Technical Controls

• All Platform pages and API endpoints are served exclusively over HTTPS using 256-bit SSL/TLS encryption.
• Financial Data and KYC Document Data are encrypted at rest using AES-256 encryption.
• Player passwords are stored as salted cryptographic hashes — they are never stored in plain text and are never accessible to uss77 staff.
• Session tokens expire automatically after a period of inactivity, and concurrent session detection flags unusual login patterns for review.
• Platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.

Organizational Controls

• Access to Personal Data is restricted to uss77 staff and contractors who require it to perform their specific role — enforced by role-based access controls and the principle of least privilege.
• All staff with access to Personal Data are subject to confidentiality obligations and receive regular data protection training.
• Third-party processors are subject to security due diligence before engagement and periodic audits thereafter.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, uss77 will notify affected Players via their registered email address within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the incident.

uss77 uses first-party cookies and similar tracking technologies on the Platform. We do not use third-party advertising cookies or behavioral tracking pixels from ad networks. The cookies we use fall into the following categories:

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. You may disable functional and analytical cookies through your browser settings; however, doing so may affect the quality of your experience on the Platform. As uss77 does not use advertising cookies, you will not see targeted ads on third-party websites based on your uss77 activity.

You hold meaningful rights over the Personal Data that uss77 holds about you. uss77 is committed to facilitating the exercise of these rights promptly and without unnecessary friction. Your rights include:

• Right of Access: You may request a copy of all Personal Data we hold about you, the purposes for which it is processed, and the categories of third parties with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you. For most Account details, you can update this directly from your Account profile page.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to our legal retention obligations — financial and KYC records that we are legally required to retain cannot be deleted before the applicable retention period expires.
• Right to Restrict Processing: You may request that we pause the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is contested, or while an objection is being assessed.
• Right to Data Portability: You may request a copy of your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON) to enable transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling. You may also object to processing for direct marketing purposes at any time, with immediate effect.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the rights above, contact uss77's support team via live chat or email (support at uss77 dot bio). We will acknowledge your request within 48 hours and respond substantively within 30 calendar days. Identity verification may be required before we can fulfill certain requests to protect against unauthorized data access.

The uss77 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a Player is under 21, the Account will be immediately suspended, any balance will be returned after review, and all associated Personal Data will be deleted as soon as legally permissible.

If you are a parent or guardian and believe that a minor has registered on the Platform using your details or their own, please contact support immediately via live chat so that we can investigate and take appropriate action without delay.

The uss77 Platform does not contain links to external third-party websites for commercial or advertising purposes. Any third-party services referenced on the Platform (such as payment processors and game studios) operate under their own privacy policies, which uss77 does not control. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

uss77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify you via email to your registered address and/or via a prominent notice on the Platform, with a minimum of seven days' notice before the revised policy takes effect — except where immediate changes are required for legal or security reasons.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes acceptance of those changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy, the way your Personal Data is handled, or the exercise of your data rights, please contact the uss77 privacy team through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform — fastest channel for urgent matters including data breach reports and immediate self-exclusion requests.
• Email: support at uss77 dot bio — responses within 24 hours for general enquiries; within 48 hours for formal data rights requests.

Our support team includes native Indonesian-speaking agents available around the clock, including during Idul Fitri, Nyepi, and other Indonesian national holidays. If your concern relates to a formal data rights request, please indicate this clearly in your opening message so that it can be routed to the appropriate team member without delay.