Privacy Policy

mob77 collects Personal Data through several channels. The categories of data we collect include:

Registration Data

• Full legal name, date of birth, and nationality.
• Email address and mobile phone number.
• Residential address, including city and province within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Semarang).
• Username and encrypted password hash.

Identity Verification (KYC) Data

• Government-issued photo identification documents (e.g., Indonesian National ID card / KTP, passport).
• Proof of address documentation where required.
• Selfie or liveness check image, where required by our KYC provider to confirm document authenticity.

Financial Data

• Bank account details for the purpose of processing IDR deposits and withdrawals — including account holder name, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), and account number.
• E-wallet identifiers associated with OVO, DANA, GoPay, ShopeePay, or LinkAja accounts registered in your name.
• Deposit and withdrawal transaction history, including amounts in Rp, timestamps, and payment method used.

Gameplay and Behavioural Data

• Wagering history across all products — live casino, slots, sportsbook, Bandar Q, and Sic Bo.
• Game session durations, login timestamps, and Platform navigation patterns.
• Responsible gaming tool usage — including any deposit limits, cooling-off periods, or self-exclusion requests you have activated.

Technical Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser version, and screen resolution.
• Cookie identifiers, session tokens, and analytics event data.
• Referring URL and search query data where you arrive at the Platform via a search engine or partner link.

Communications Data

• Records of all correspondence between you and mob77 support, including live chat transcripts, email exchanges, and any formal complaint submissions.
• Survey responses and voluntary feedback submitted through Platform channels.

mob77 processes your Personal Data only for lawful, specified purposes. The primary purposes for which we use your data are as follows:

mob77 does not use your Personal Data for automated decision-making that produces significant legal effects without human review, except where explicitly required by our licensing obligations or fraud prevention systems.

The mob77 Platform uses cookies and similar tracking technologies to deliver and improve our services. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Required for core Platform functionality — including session management, login state persistence, and security token validation. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences — such as preferred language display settings and responsible gaming tool configurations — so you do not need to reconfigure them on each visit.
• Analytics Cookies: Collect aggregated, anonymised data about how Members navigate the Platform — including pages visited, session duration, and feature interaction rates. This data is used solely for internal performance analysis and product improvement.
• Marketing and Personalisation Cookies: Enable mob77 to display relevant promotional content based on your Platform activity and preferences. These cookies are only activated where you have provided explicit opt-in consent.

You may manage your cookie preferences at any time through your browser settings. Note that disabling certain cookie categories may affect the functionality or performance of the Platform. mob77 does not use third-party advertising networks or cross-site tracking cookies for the purpose of selling your behavioural data to external marketers.

mob77 does not sell, rent, or trade your Personal Data to any third party for marketing or commercial purposes. Data sharing is limited strictly to the following categories of recipients and circumstances:

• Licensed Payment Processors: We share the minimum necessary financial data with our payment processing partners — including the local bank transfer gateway and e-wallet settlement providers — to execute your deposit and withdrawal requests. These processors are contractually bound to handle your data with the same level of security as mob77.
• KYC Verification Providers: Identity documents and selfie images submitted during account verification are processed by our licensed KYC provider. Data shared with the KYC provider is used exclusively for identity authentication and is not retained by the provider beyond the contractually specified verification window.
• Game Technology Providers: Certain gameplay data (session identifiers, wager amounts, game round IDs) is transmitted to our game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — for the purpose of game delivery, dispute resolution, and RNG audit logging. These providers operate under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by applicable international licensing obligations or where we receive a lawful request from a competent authority, mob77 may disclose Personal Data as required. We will not disclose data beyond the scope of the lawful request received.
• Internal Group Entities: Personal Data may be shared within the mob77 operating group for the purposes of consolidated fraud monitoring, AML compliance, and responsible gaming programme coordination.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by mob77 may access Personal Data on a strictly need-to-know basis, subject to professional confidentiality obligations.

All third-party processors engaged by mob77 are required to maintain security standards consistent with industry best practice, including encryption at rest and in transit, access controls, and incident response procedures.

mob77 employs a layered security architecture designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and the mob77 Platform is protected by 256-bit SSL/TLS encryption — the same standard used by Indonesia's major commercial banks, including BCA, BRI, BNI, and Mandiri.
• Encryption at Rest: Sensitive Personal Data stored on mob77 servers — including KYC documents, payment account details, and password hashes — is encrypted using AES-256 or equivalent at-rest encryption.
• Access Controls: Access to Personal Data is strictly restricted to mob77 personnel with a documented operational need. Role-based access controls and multi-factor authentication are enforced for all internal systems that handle Member data.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion detection systems. Anomalous access patterns trigger immediate alerts to the mob77 security operations team.
• Password Security: Member passwords are never stored in plaintext. We apply a one-way cryptographic hash function with salting prior to storage. mob77 staff cannot retrieve your original password — only a password reset process can restore access.
• Incident Response: In the event of a data breach that poses a material risk to Members, mob77 will notify affected Members and the relevant regulatory body within the timeframe required by our licensing obligations.

While mob77 takes all reasonable measures to secure your Personal Data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying mob77 immediately at [email protected] if you suspect any unauthorised access to your Account.

mob77 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and licensing obligations. Our standard retention periods are as follows:

Where retention is required beyond the periods above due to ongoing legal proceedings, regulatory investigations, or dispute resolution processes, data will be retained until those matters are conclusively resolved. Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

As a Member of the mob77 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request — [Right Type]". mob77 will acknowledge your request within 24 hours and provide a substantive response within 30 calendar days.

• Right of Access: You have the right to request a copy of all Personal Data mob77 holds about you, together with information about how it is being processed and on what legal basis.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Certain data corrections (e.g., legal name changes) may require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that regulatory retention obligations (e.g., financial transaction records) may prevent full erasure within the applicable retention window.
• Right to Restrict Processing: You may request that mob77 limits the processing of your Personal Data to storage only — for example, while a dispute or rectification request is being resolved.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the Personal Data you have provided to mob77, for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your Personal Data on the grounds of legitimate interest, including profiling for marketing personalisation. Where you object, mob77 will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

mob77 operates as an internationally licensed platform. Some of the third-party service providers we engage — including game technology providers and KYC verification partners — may process your Personal Data in jurisdictions outside Indonesia. Where such international transfers occur, mob77 ensures that adequate safeguards are in place, including:

• Contractual data processing agreements that impose security and handling obligations equivalent to those described in this Privacy Policy.
• Transfer only to jurisdictions that maintain internationally recognised data protection standards.
• Minimisation of the data transferred to the strict minimum necessary for the specific processing purpose.

mob77 does not transfer your Personal Data to any jurisdiction that lacks adequate data protection frameworks without implementing supplementary technical and contractual safeguards. If you have questions about the specific countries to which your data may be transferred, contact us at [email protected].

The mob77 Platform is strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21.

• Age verification is a mandatory step in the account registration process. Providing a false date of birth to circumvent the 21+ restriction constitutes a material breach of mob77's Terms & Conditions and will result in immediate account closure and forfeiture of any associated balance.
• If mob77 becomes aware that Personal Data has been collected from an individual under the age of 21 — whether through an error in the registration process or subsequent discovery — that data will be securely deleted immediately and the associated account will be closed.
• If you are a parent or guardian and believe that a minor in your care has registered on the Platform, please contact us immediately at [email protected] so that we can take prompt remedial action.

mob77 may send you promotional communications — including bonus offers, seasonal campaign notifications (e.g., Ramadhan reload bonuses, Idul Fitri free bets, Indonesian Independence Day cashback, Imlek promotions, Nyepi offers), and new product announcements — via email or in-Platform notification, subject to the following conditions:

• Marketing communications are sent only to Members who have provided explicit opt-in consent during registration or subsequently through their Account settings.
• You may withdraw your marketing consent at any time by updating your notification preferences in the Account settings dashboard, or by clicking the unsubscribe link included in every marketing email.
• Withdrawal of marketing consent does not affect transactional communications — including deposit confirmations, withdrawal notifications, security alerts, and responsible gaming notifications — which are sent regardless of marketing preferences as they are necessary for account management.
• mob77 does not share your contact details with third-party marketers. All promotional communications you receive from mob77 originate exclusively from mob77-operated channels.

mob77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our Platform's features and functionality. When material changes are made, we will:

• Publish the updated Privacy Policy on this page with a revised effective date prominently displayed at the top of the document.
• Notify registered Members via email to the address on file, providing a summary of the key changes made.
• Where changes require fresh consent (e.g., a new processing purpose based on consent), present a clear consent prompt on next login before the changes take effect for your Account.

Continued use of the Platform following the publication of an amended Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page each time you access the Platform to stay informed of how your data is being managed.

For all privacy-related enquiries, data subject requests, or concerns about how mob77 handles your Personal Data, please contact us through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request — [Right Type]" for prompt routing.
• Live Chat: Available 24/7 via the in-Platform live chat widget. Native Indonesian-speaking agents are available on every shift for Members who prefer to discuss their privacy concerns in their first language.
• Response Times: Acknowledgement within 24 hours of receipt; substantive written response within 30 calendar days. Complex requests involving multiple data categories or international transfer queries may require additional time, in which case mob77 will notify you of the extended timeline within the initial 30-day window.

All formal data subject requests must be submitted in writing — either via email or through a documented live chat transcript — to ensure an auditable record is maintained. mob77 reserves the right to request identity verification before processing any data subject request, to ensure data is released only to its rightful owner.