Your privacy matters to km77a. This Policy explains exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold over that data as a km77a member.
1.1 This Privacy Policy applies to all personal data processed by km77a in connection with the operation of the Platform at https://km77a.net, including all services offered thereon — sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), Bingo Online, and Bandar Q.
1.2 km77a acts as the data controller in respect of the personal data of its Members and site visitors. Where km77a engages third-party processors to handle data on its behalf (for example, payment processors or identity verification providers), those parties act strictly as data processors under written agreements that bind them to confidentiality and security standards consistent with this Policy.
1.3 This Policy should be read alongside the km77a Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
1.4 By registering an account on km77a or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood these terms and consent to the processing activities described herein.
2.1 km77a collects the following categories of personal data about Members and, where applicable, site visitors:
2.2 km77a does not intentionally collect special-category sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data for identification purposes — except where a liveness-check image is strictly required to complete KYC verification, in which case it is processed solely for that purpose and deleted upon completion of the verification process.
3.1 km77a collects your personal data through the following channels:
3.2 You are under no legal obligation to provide your personal data to km77a; however, certain data is strictly necessary for us to provide the service. Failure to provide required data (for example, refusing to complete KYC verification) may result in account restrictions or the inability to process withdrawals, as described in the Terms & Conditions.
4.1 The table below sets out each processing purpose, the categories of data involved, and the legal basis on which km77a relies:
| Purpose | Data Categories | Legal Basis |
|---|---|---|
| Account registration & management | Identity, Contact, Account | Performance of contract |
| Payment processing & fraud prevention | Transaction, Identity, Technical | Performance of contract; Legitimate interest |
| KYC / identity verification | Identity, KYC documents | Legal obligation; Performance of contract |
| Responsible gaming monitoring | Account, Transaction, Responsible Gaming | Legal obligation; Legitimate interest |
| Customer support | Identity, Contact, Communications | Performance of contract |
| Platform security & abuse prevention | Technical, Account, Transaction | Legitimate interest |
| Personalised promotional communications | Identity, Contact, Account, Transaction | Consent (opt-in required) |
| Analytics & Platform improvement | Technical (aggregated/anonymised) | Legitimate interest |
| Compliance with legal obligations | All categories as required | Legal obligation |
4.2 Where km77a processes your data on the basis of legitimate interest, we have carried out a balancing test and concluded that our interests do not override your fundamental privacy rights. You have the right to object to legitimate-interest processing at any time (see Section 9).
4.3 Where km77a relies on your consent — specifically, for sending you personalised promotions relating to events such as Idul Fitri, Ramadhan, BRI Liga 1 season openers, or Timnas Indonesia match previews — you may withdraw that consent at any time by updating your communication preferences in Account settings or by contacting support.
5.1 km77a does not sell your personal data to third-party advertisers, data brokers, or marketing agencies. Data sharing is limited to the following categories of recipient, strictly on a need-to-know basis:
5.2 In the event of a merger, acquisition, or sale of all or a material part of km77a's business assets, Member data may be transferred to the acquiring entity, subject to that entity assuming the privacy obligations set out in this Policy. Members will be notified of any such transfer in advance where practicable.
6.1 km77a retains your personal data for as long as your account remains active and for a further period following account closure as required by applicable law and our internal compliance framework. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & Contact | Active account life + 5 years post-closure | Anti-money-laundering (AML) compliance |
| KYC documents | Active account life + 5 years post-closure | Regulatory obligation |
| Transaction records | Active account life + 5 years post-closure | Financial record-keeping; AML |
| Betting & gaming activity | Active account life + 2 years post-closure | Dispute resolution; responsible gaming |
| Support communications | 3 years from last contact | Complaint resolution; quality assurance |
| Technical / device data | 13 months from collection | Security monitoring; analytics |
| Marketing consent records | Until consent withdrawn + 3 years | Proof of consent |
6.2 Upon expiry of the applicable retention period, km77a will securely delete or anonymise your personal data so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
6.3 Where a Member has been identified as having engaged in fraudulent activity or a material breach of the Terms & Conditions, km77a reserves the right to retain relevant data for a longer period as necessary to protect its legal interests and to prevent the fraudulent Member from re-registering on the Platform.
7.1 km77a applies a layered approach to data security, combining technical, organisational, and procedural controls designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:
7.2 While km77a implements robust security measures, no system can guarantee absolute security. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, km77a will notify affected Members without undue delay and will report the breach to the relevant supervisory authority where required by applicable law.
8.1 km77a uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to operate and improve the Platform. The following cookie categories are used:
8.2 You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Clearing all cookies will log you out of your km77a account.
8.3 km77a does not use third-party advertising networks or allow external ad-tech companies to place tracking cookies on the Platform.
9.1 Depending on the laws applicable in your jurisdiction, you may hold some or all of the following rights in respect of your personal data held by km77a. km77a extends these rights to all Members as a matter of policy:
Request a copy of the personal data km77a holds about you, along with information about how it is processed.
Ask us to correct inaccurate or incomplete personal data held on your account without undue delay.
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations.
Ask us to restrict processing of your data — for example, while the accuracy of data you have contested is being verified.
Receive your personal data in a structured, machine-readable format and, where technically feasible, have it transmitted to another controller.
Object to processing based on legitimate interest or for direct marketing purposes; km77a will cease that processing unless it has compelling legitimate grounds that override your interests.
Not to be subject to decisions based solely on automated processing — including profiling — that produces significant legal effects on you, without human review.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
9.2 To exercise any of the rights above, please contact km77a's data team via live chat on the Platform or by email at support at km77a dot net with the subject line "Privacy Rights Request". km77a will respond within thirty (30) calendar days of receiving a verifiable request. In complex cases, this period may be extended by a further two (2) months, and you will be informed of the extension.
9.3 km77a will not charge a fee for handling privacy rights requests unless a request is manifestly unfounded, excessive, or repetitive — in which case a reasonable administrative fee may be applied.
9.4 To protect Member privacy, km77a will verify your identity before processing a rights request. Submitting a request from your registered email address and, where required, confirming your account details via our secure verification process constitutes adequate verification in most cases.
10.1 km77a does not knowingly collect personal data from persons under the age of 21. If we discover or are notified that a Member is under 21, we will immediately suspend the account, reverse all transactions where possible, delete all personal data associated with that account, and take steps to prevent re-registration.
10.2 Parents and guardians who believe their child may have registered on km77a are urged to contact us immediately via live chat or at support at km77a dot net. We will investigate and act promptly.
10.3 km77a supports the use of parental control software as a supplementary measure for households with minors. However, such software does not substitute for the age verification controls km77a applies at the account registration and KYC stages.
11.1 km77a's primary membership base is located in Indonesia. In operating the Platform, certain personal data may be transferred to and processed in countries outside Indonesia — for example, by cloud infrastructure providers or game studio partners whose servers are located in other jurisdictions.
11.2 Where personal data is transferred internationally, km77a takes steps to ensure that an adequate level of protection is applied to that data, equivalent to the protections described in this Policy. These steps may include:
11.3 By using the km77a Platform, you acknowledge and consent to the transfer of your personal data to the extent described in this section.
12.1 The km77a Platform may contain references to third-party services — for example, payment gateway interfaces operated by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja — which are accessed via redirect or embedded widget during the deposit or withdrawal flow.
12.2 Once you leave the km77a Platform and interact directly with a third-party service, that service's own privacy policy governs the collection and processing of your data. km77a is not responsible for the privacy practices of third-party services and encourages Members to review their respective policies.
12.3 Game content loaded within the Platform from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operates within an iframe environment controlled by km77a. Those studios receive only the anonymised session tokens necessary to operate game rounds and are contractually prohibited from using that data for purposes other than game delivery.
13.1 km77a reserves the right to update this Privacy Policy at any time to reflect changes in our processing activities, applicable law, or best practices. The "Last Updated" date at the top of this page will be revised accordingly.
13.2 Where a change is material — for example, a change to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — km77a will notify active Members via the Platform notification centre or by email to the address registered on your account, with a minimum of fourteen (14) days' notice before the change takes effect.
13.3 Non-material changes (such as typographical corrections or formatting updates that do not affect your rights) may be published without advance notice and will be effective immediately. Continued use of the Platform after the effective date of any amendment to this Policy constitutes your acceptance of the updated terms.
13.4 Previous versions of this Policy are available on request by contacting km77a support.
14.1 If you have any questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a data-related concern, please contact km77a's privacy team through any of the following channels:
14.2 km77a aims to resolve all privacy enquiries promptly and to your satisfaction. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.
14.3 Our support team operates around the clock, including during Indonesian public holidays such as Idul Fitri, Nyepi, and Ramadhan, and can assist Members in both English and Indonesian.
Six things every km77a member should know about how their personal data is handled.
Every km77a login session, deposit, and withdrawal is protected by 256-bit TLS encryption end-to-end. Your financial and identity data is never transmitted in plaintext. Bank-grade security at every touchpoint.
km77a does not sell, rent, or trade your personal data to advertising networks, data brokers, or third-party marketers. Your information is used exclusively to operate your account and improve the Platform.
Access, correct, export, or delete your personal data at any time by contacting our support team. Marketing communications are fully opt-in and can be withdrawn instantly from Account settings.
km77a collects only what is strictly necessary to deliver the service, comply with legal obligations, and keep the Platform secure. We do not build advertising profiles or monitor your activity outside our Platform.
Payment details for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja are processed through encrypted channels. km77a stores only masked identifiers — never full account numbers or card details.
km77a applies multi-stage age verification at registration and KYC stages. No person under 21 may access the Platform. Any account found to belong to a minor is immediately suspended and all associated data purged.
km77a is built on the principle that a trustworthy betting platform must be a secure one. With bank-grade encryption, strict data minimisation, and full compliance with international privacy standards, you can focus on what matters — exploring Indonesia's most complete sports betting and casino experience, all in IDR with your preferred local payment method. Adults only — 21+ required.