Privacy Policy

In this Privacy Policy, the following terms have the meanings set out below:

• "er777", "we", "us", "our" — the er777 online gambling platform operated at https://er777.lat and all associated subdomains and mobile interfaces.
• "Member", "you", "your" — any individual who has registered an account on er777 or who otherwise accesses the platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including but not limited to name, date of birth, email address, postal address, telephone number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "KYC" — Know Your Customer, the identity and address verification process carried out to comply with er777's anti-money-laundering (AML) and responsible gaming obligations.
• "Cookies" — small text files placed on your device by the er777 platform to maintain session state, remember preferences, and generate aggregate analytics.
• "IDR" / "Rupiah" — Indonesian Rupiah, the sole transactional currency of the er777 platform.

2.1 This Privacy Policy applies to all Personal Data collected, processed, or stored by er777 in connection with your use of the platform — including account registration, deposits and withdrawals in Indonesian Rupiah, KYC verification, gameplay, promotional participation, and customer support interactions.

2.2 er777 acts as the data controller in respect of all Personal Data collected directly through the platform. Where er777 engages third-party payment processors (e.g., for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja transactions), those processors act as independent data controllers in respect of the transaction data they process under their own privacy frameworks.

2.3 This policy is written in English. For members accessing er777 from Indonesia, this policy governs the use of the platform as an offshore online gambling service. er777 is not subject to Indonesian domestic data-protection legislation in its capacity as an offshore operator; however, we voluntarily apply internationally recognised data-protection principles consistent with globally accepted standards.

3.1 er777 collects Personal Data from you in the following categories and contexts:

Registration Data

• Full legal name, date of birth, gender.
• Indonesian residential address (street, city, province, postal code).
• Email address and contact telephone number.
• Preferred username and securely hashed account password.

Identity Verification (KYC) Data

• Government-issued photo ID (e.g., Indonesian national identity card — KTP, passport, or driver's licence) — document number, expiry date, and scan/photograph of the document.
• Proof of address document (e.g., utility bill, bank statement addressed to your Indonesian residential address).
• Selfie photograph alongside your identity document, as requested by the er777 verification team.
• Proof of payment method ownership (e.g., bank account statement or e-wallet screenshot confirming ownership).

Financial Transaction Data

• Deposit and withdrawal amounts in IDR, timestamps, and transaction reference numbers.
• Payment method identifiers (e.g., last four digits of bank account number or masked e-wallet account ID for OVO, DANA, GoPay, ShopeePay, and LinkAja).
• Account balance history and bonus credit records.

Gameplay & Behavioural Data

• Game type, session duration, stake amounts, and win/loss records across all er777 products — including live baccarat, bandar ceme (Indonesia's domino-based card game), slots, sportsbook markets, and crash games.
• Sportsbook selections, odds accepted, and in-play wager patterns.
• Responsible gaming tool usage (deposit limits, session limits, cooling-off periods, self-exclusion requests).

Technical & Device Data

• IP address, approximate geolocation (city/region level), and Internet Service Provider (ISP).
• Device type, operating system, browser type and version.
• Session cookies, authentication tokens, and platform-generated analytics identifiers.
• Pages visited, time on page, clickstream data, and referral source.

Communications Data

• Live chat transcripts, support email content, and any documents or attachments you submit to the er777 support team.
• Records of your promotional opt-in/opt-out choices and marketing communication preferences.

4.1 er777 uses the Personal Data described in Section 3 for the following purposes:

4.2 er777 does not use automated decision-making or profiling in a way that produces legal or similarly significant effects on Members, except where necessary for fraud prevention or AML compliance, in which case a Member may request human review of any automated decision by contacting [email protected].

5.1 er777 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to provide you with the services you have requested — including account creation, deposit and withdrawal processing, and gameplay — cannot be limited or objected to without affecting er777's ability to provide those services.
• Legitimate interests: er777 processes Technical Data and aggregated Gameplay Data to detect fraud, prevent bonus abuse, maintain platform security, and improve the user experience. These interests are balanced against your rights and do not override them.
• Legal obligation: KYC verification, AML transaction monitoring, and record-keeping are carried out to comply with the requirements of er777's international gaming licence and applicable financial crime prevention standards.
• Consent: Marketing communications (promotional email, SMS) are sent only where you have given explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 er777 does not sell, rent, or commercially share your Personal Data with any third party. Data may be disclosed in the following limited circumstances only:

• Payment processors: Financial Transaction Data is shared with the payment processor facilitating your specific transaction (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) to the minimum extent necessary to complete the transaction.
• KYC and identity verification providers: KYC Data may be shared with third-party identity verification specialists engaged by er777 to carry out document authentication. These providers operate under strict data processing agreements and may not use your data for any purpose other than verification.
• Game studios and content providers: Anonymised gameplay session data is shared with game studios (e.g., Pragmatic Play, Evolution Gaming, Spribe) solely for the purposes of game log reconciliation and dispute resolution. No personally identifiable information is shared with game studios.
• Regulatory and law enforcement authorities: er777 will disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by a valid court order, or by the terms of our international gaming licence. er777 will notify affected Members of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of er777's business assets, Personal Data held at the time of transfer may be disclosed to the acquiring entity. Members will be notified of any such transfer at least 30 days in advance and will have the option to close their account and withdraw their balance prior to the transfer taking effect.

6.2 All third parties to whom er777 discloses Personal Data are required to maintain appropriate technical and organisational measures to protect that data against unauthorised access, loss, or misuse.

7.1 er777 uses the following categories of cookies and similar technologies when you access the platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancer routing cookies. These cookies cannot be disabled without impairing the core functionality of the platform.
• Preference cookies: Store your selected language, display preferences, and responsible gaming tool settings so that they persist across sessions.
• Analytics cookies: Generate aggregate, anonymised data on how Members navigate and interact with the platform. This data is used solely to identify usability issues and prioritise product improvements. No individual Member is identified in analytics reports.

7.2 er777 does not use third-party advertising cookies, cross-site tracking pixels, social media tracking scripts, or any technology that monitors your activity on websites other than er777.lat.

7.3 You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging in to your er777 account. Blocking preference or analytics cookies will not affect your ability to use the platform but may result in certain preferences not being saved between sessions.

8.1 er777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the duration of the active account relationship and for a minimum of 5 years following permanent account closure, in compliance with AML record-keeping requirements under er777's licensing obligations.
• KYC documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay records: Retained for a minimum of 3 years from the date of each gaming session for dispute resolution and audit purposes.
• Support communications: Retained for a minimum of 2 years from the date of the communication, or longer where a complaint or dispute remains unresolved.
• Marketing consent records: Retained for the duration of the consent period and for 1 year following any opt-out, as evidence of consent management.

8.2 Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with er777's internal data lifecycle management procedures.

9.1 As an er777 member, you have the following rights in respect of the Personal Data we hold about you:

• Right of access: You may request a copy of the Personal Data er777 holds about you at any time. er777 will provide this within 30 days of receiving a valid request.
• Right to rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected. Account details (name, address, contact information) may also be updated directly from within your account settings for minor changes; significant changes (e.g., legal name change) require documentary evidence submitted to the support team.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that er777 is required by its licensing obligations to retain certain data for minimum periods as set out in Section 8; erasure requests cannot override these legally mandated retention periods.
• Right to restriction of processing: You may request that er777 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to object: You may object to processing carried out on the basis of er777's legitimate interests (see Section 5). er777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that er777 provide your Personal Data in a structured, commonly used, machine-readable format.

9.2 To exercise any of the above rights, please contact the er777 Data team at [email protected] with the subject line "Data Rights Request". er777 will acknowledge your request within 5 business days (WIB) and provide a substantive response within 30 calendar days. Complex or high-volume requests may be extended by a further 30 days, in which case er777 will notify you of the extension before the initial deadline.

9.3 er777 will not charge a fee for data rights requests unless a request is manifestly unfounded or excessive, in which case er777 may charge a reasonable administrative fee or decline to act on the request, with reasons provided in writing.

10.1 er777 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and er777's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. Our SSL certificate is issued by a globally trusted Certificate Authority and is renewed automatically.
• Encryption at rest: Personal Data stored in er777's database is encrypted at rest using AES-256. KYC documents are stored in a separately encrypted document vault with restricted access controls.
• Access controls: Access to production data is restricted to authorised er777 personnel on a strict need-to-know basis. All staff access is subject to role-based permissions, multi-factor authentication (MFA), and comprehensive audit logging.
• Password security: Member passwords are stored exclusively as salted cryptographic hashes using bcrypt. er777 staff cannot view, recover, or share passwords in any form. If you suspect your password has been compromised, use the password reset function immediately and contact support.
• Penetration testing and vulnerability management: er777's platform undergoes regular independent security assessments. Critical vulnerabilities are remediated within 48 hours of identification.
• Incident response: In the event of a confirmed personal data breach that poses a risk to Members, er777 will notify affected Members within 72 hours of becoming aware of the breach, detailing the nature of the incident, data affected, and steps taken to contain it.

10.2 While er777 takes all reasonable steps to protect your data, no internet-based system can be guaranteed entirely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying er777 immediately at [email protected] if you suspect any unauthorised access to your account.

11.1 er777 enforces a strict 21+ age policy across all products, promotions, and services. The platform is not intended for, and does not knowingly collect Personal Data from, any individual under 21 years of age.

11.2 During registration, all Members are required to confirm that they are at least 21 years of age. Where er777 has reason to suspect that a Member is under 21, the Account will be immediately suspended and KYC documentation will be requested. If KYC confirms that the Member is under 21, the Account will be permanently closed, all funds returned net of any amounts identifiably derived from underage play, and all Personal Data associated with the Account securely deleted in accordance with our data retention policy.

11.3 If you believe that a person under 21 has registered an account on er777, please contact us immediately at [email protected]. er777 will investigate and act promptly on any such report.

12.1 The er777 platform may contain links to third-party payment providers, game studio interfaces, or informational resources. This Privacy Policy applies exclusively to Personal Data processed by er777 and does not extend to any third-party website, application, or service that you access via a link from the er777 platform.

12.2 er777 has no control over, and accepts no responsibility for, the privacy practices or content of any third-party service. We strongly recommend reviewing the privacy policy of any third-party service before providing Personal Data to it.

12.3 The inclusion of a link to any third-party service on the er777 platform does not constitute an endorsement of that service or its privacy practices.

13.1 er777 reserves the right to update or amend this Privacy Policy at any time. The "Last updated" date at the top of this page reflects the date on which the most recent revision was published.

13.2 Where er777 considers an amendment to be material — for example, a change to the categories of data collected, the purposes for which data is used, or the third parties with whom data may be shared — er777 will notify affected Members via the registered email address on file at least 14 days prior to the amendment taking effect.

13.3 Your continued use of the er777 platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must stop using the platform and may request deletion of your Personal Data subject to the retention obligations set out in Section 8.

14.1 For all questions, concerns, or requests relating to this Privacy Policy or to the Personal Data er777 holds about you, please contact the er777 Data team using one of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing. Responses to privacy-related enquiries are provided within 5 business days (WIB).
• Live Chat: Available 24/7 from any page on the er777 platform. Our support team can assist with basic privacy questions and will escalate complex data rights requests to the Data team on your behalf.

14.2 This Privacy Policy was last reviewed and updated on 1 January 2026. All prior versions of this Privacy Policy are superseded by this document.