Your privacy matters to us. This document explains what personal data iso77 collects from Indonesian players, how it is used, who it may be shared with, and what rights you hold over your information.
Your Privacy Is a Fundamental Commitment. iso77 is designed from the ground up to handle your personal data with care, discretion, and transparency. This Privacy Policy is a binding part of the relationship between you and iso77. By registering an Account and using the platform, you acknowledge that you have read, understood, and agreed to the practices described in this document.
iso77 operates the online gambling platform accessible at iso77.bet (the "Platform"), which provides sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and related services to registered players primarily based in Indonesia. In delivering these services, iso77 necessarily collects and processes certain categories of personal data relating to its players, prospective players, and website visitors.
This Privacy Policy ("Policy") sets out the categories of personal data iso77 collects, the lawful bases on which it processes that data, the purposes for which the data is used, the circumstances in which it may be disclosed to third parties, the retention periods applied, and the rights available to you as a data subject.
iso77 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside iso77's Terms and Conditions, which govern your contractual relationship with the platform. Capitalised terms used but not defined in this Policy carry the meanings assigned to them in the Terms and Conditions.
For the purposes of this Policy, the data controller in respect of personal data collected via the iso77 Platform is the entity operating the iso77 brand under its applicable international operating licence. The Company's designated data protection contact can be reached at the email address listed in Section 15 of this Policy.
Where iso77 engages third-party service providers (such as payment processors, identity verification agencies, or game studios) who process personal data on behalf of iso77, those parties act as data processors and are contractually bound to handle data only on iso77's documented instructions, to maintain appropriate security standards, and not to use the data for their own independent purposes.
iso77 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect include, but are not limited to, the following:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, national identity card number (KTP), passport number, gender, and a photograph or selfie submitted during KYC verification. |
| Contact Data | Registered email address, mobile telephone number, and residential address (including city — e.g., Jakarta, Surabaya, Bandung, Bali — and postal code). |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records, and Account balance data. |
| Account Data | Username, encrypted password hash, Account status, Account tier, login timestamps, preferred currency (IDR), and communication preferences. |
| Transactional Data | Bet history, game session records, wagering amounts, winnings and losses, bonus usage, and promotional participation records. |
| Technical Data | IP address, device type and model, operating system version, browser type and version, session duration, referral URL, and geolocation data derived from IP address. |
| Communications Data | Records of live chat sessions, email correspondence, WhatsApp messages sent to iso77 support, and any complaints or feedback submitted through official channels. |
| Responsible Gaming Data | Deposit limits set by you, self-exclusion requests, session time limits, and any disclosures made to our responsible gaming team regarding problem gambling. |
iso77 does not collect or process special categories of personal data (such as health data, racial or ethnic origin, religious beliefs, or political opinions) except where you voluntarily disclose such information in the context of a responsible gaming assessment, in which case it is processed solely to provide you with appropriate support.
iso77 collects personal data through several distinct channels:
iso77 processes your personal data only where a valid legal basis exists. The primary bases on which iso77 relies are as follows:
iso77 uses the personal data it collects for the following purposes:
iso77 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. Data is shared only in the following circumstances and only to the extent necessary:
All third-party data processors engaged by iso77 are required to enter into written data processing agreements that impose obligations on them consistent with applicable data protection standards.
iso77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | For the duration of the Account plus 5 years following permanent Account closure, to satisfy AML record-keeping obligations. |
| Financial transaction records | 7 years from the date of the transaction, in accordance with standard financial record-keeping requirements. |
| KYC documents | 5 years from Account closure or the date the document was submitted, whichever is later. |
| Customer support communications | 3 years from the date of the last interaction, or longer if the communication is relevant to an open complaint or legal matter. |
| Marketing consent records | Until consent is withdrawn plus 2 years, to evidence the existence of prior consent if required. |
| Technical / log data | Up to 13 months from collection, subject to ongoing fraud investigation requirements. |
| Self-exclusion records | Indefinitely, to prevent re-registration by a self-excluded individual. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with iso77's internal data disposal procedures.
iso77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
While iso77 takes all reasonable precautions, no data transmission over the internet or data storage system can be guaranteed as completely secure. In the event of a data breach that is likely to result in a material risk to affected individuals, iso77 will take immediate steps to contain the breach, notify the relevant authorities as required, and communicate with affected players in a timely and transparent manner.
Your Account password is never stored in plain text. iso77 staff cannot read your password and will never ask you to provide it. If you receive any communication claiming to be from iso77 and requesting your password, treat it as fraudulent and contact our support team immediately.
iso77 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a web server when you visit a website. The cookies used by iso77 fall into the following categories:
iso77 does not use third-party advertising or retargeting cookies that track your activity across other websites for the purpose of serving you advertisements elsewhere on the internet. Your browsing activity on iso77 remains on iso77.
You may configure your browser to refuse cookies or to alert you when cookies are being placed; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform. Browser-level cookie controls are available in the settings of all major browsers including Chrome, Firefox, Safari, and the Android WebView used by many Indonesian mobile devices.
As a data subject whose personal data is processed by iso77, you hold a number of rights in relation to that data. iso77 respects and facilitates these rights as follows:
To exercise any of the rights listed above, please contact the iso77 data protection team at the email address provided in Section 15. iso77 will acknowledge your request within 72 hours and aim to provide a substantive response within 30 calendar days. Where a request is complex or where multiple requests have been received simultaneously, the response period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.
iso77 will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.
The iso77 Platform is strictly intended for adults aged 21 years or older. iso77 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. Age verification is a mandatory component of the KYC process, and any Account found during verification to belong to a person under the age of 21 will be immediately suspended, all associated data will be securely deleted (subject only to any mandatory retention obligation), and any balance will be returned to the depositing payment method.
If you believe that a minor has registered an Account on the iso77 Platform or that a minor's data has been collected, please contact us immediately at [email protected] so that we may investigate and take remedial action without delay.
21+ Policy: iso77 applies a strict minimum age of 21 in alignment with responsible gaming best practices for the Indonesian market. This threshold applies without exception to all players, regardless of the legal gambling age in other jurisdictions they may have previously used.
The iso77 Platform integrates with a number of third-party service providers whose own privacy policies govern how they handle data processed through their systems. These include, among others, game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, as well as payment technology providers and identity verification platforms.
When you play a game delivered by a licensed third-party studio within the iso77 Platform, the studio's system records the outcome of the game session. The data generated in that session is shared between iso77 and the studio under a contractual data processing agreement that restricts the studio's use of that data to the purposes of delivering and auditing the game.
The iso77 website does not contain links to external third-party websites. In the event that any external link is ever added in the future, iso77 will clearly identify it as external and will not be responsible for the privacy practices of any linked third-party site.
iso77 may update this Privacy Policy from time to time to reflect changes in the Platform's data practices, changes in applicable law or regulation, or changes in the Company's operational structure. When a material change is made to this Policy, iso77 will notify registered players via email to the address on file and will display a prominent notice on the Platform for a reasonable period following the update.
The updated Policy will display a revised "Last Updated" date at the top of the document. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the Platform and contact support to initiate Account closure.
iso77 encourages you to review this Policy periodically to stay informed about how your data is being protected. All prior versions of this Policy are retained in iso77's internal records and are available on request.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the iso77 data protection team through one of the following channels:
iso77 aims to acknowledge all privacy-related communications within 24 hours and to provide a complete response within 30 calendar days of receipt. For complex requests, this period may be extended by up to a further 30 days, with prior notice to you.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the iso77 Privacy Policy. If you are reading a cached or archived copy of this document, please visit iso77.bet/privacy-policy to confirm you have the current version.
iso77 treats your personal data as a trust, not a commodity. Here are the six pillars of our data protection commitment to every Indonesian player on the platform.
Every byte of data transmitted between your device and the iso77 Platform is protected by industry-standard 256-bit SSL/TLS encryption. Whether you are depositing via BCA, playing slots, or checking your balance, your connection is always secured end to end.
iso77 will never sell, rent, or trade your personal information to unaffiliated third parties for their own marketing use. Your data serves one purpose: enabling iso77 to deliver a safe, personalised gambling experience to you.
You retain meaningful rights over your personal data at all times — including the right to access, correct, restrict, port, and delete your information. Submit a request via live chat or email and iso77 will respond within 30 calendar days, no questions asked.
iso77 does not hold your data indefinitely. Each category of personal data has a defined maximum retention period, after which it is securely deleted or anonymised. Financial records are kept for 7 years to satisfy regulatory requirements; most operational data is cleared well before that.
iso77 does not use third-party advertising cookies that follow you across the internet. The only tracking technologies on the platform are strictly necessary for Platform operation, functional preference storage, internal analytics, and fraud prevention.
iso77's support team includes staff trained specifically to handle data protection queries and rights requests. Reach us 24/7 via live chat, by email at [email protected], or via WhatsApp between 08:00 and 00:00 WIB. Privacy concerns are escalated to the correct team immediately.
Have more questions about how we handle your personal information? Browse our FAQ for quick answers, or contact our support team directly — we're available around the clock.