spy77 Privacy Policy

spy77 ("we", "us", "our", "the Platform") is committed to safeguarding the privacy of every individual who interacts with its services. This Privacy Policy has been drafted to give you clear, honest, and complete information about our data practices — written in plain professional language rather than impenetrable legalese.

This Policy applies to all personal data we collect from Members (registered account holders), visitors to the spy77 website who have not yet registered, and individuals who contact spy77 through support channels including live chat and email. It covers data collected online through the Platform and data provided to us directly, such as identity documents submitted during the KYC verification process.

This Privacy Policy should be read alongside the spy77 Terms & Conditions, which govern the broader contractual relationship between you and spy77. Where these two documents address the same subject, they are to be read together as complementary rather than conflicting instruments.

For the purposes of applicable international data protection law, spy77 acts as the data controller in respect of the personal data of its Members and website visitors. As data controller, spy77 determines the purposes and means of processing personal data collected through the Platform.

All data protection inquiries, subject access requests, and requests to exercise your data rights should be directed to spy77's designated data protection contact via email at [email protected]. We will acknowledge all such requests within 48 hours and respond substantively within 30 days, in accordance with internationally recognized data protection standards.

spy77 collects only the personal data that is necessary for the operation of its platform, the fulfillment of its legal obligations, and the delivery of a high-quality gaming experience to Members located in Indonesia and other permitted jurisdictions. The categories of personal data we collect are as follows:

spy77 does not knowingly collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, or biometric data) except where such data is incidentally present in identity documents submitted for KYC purposes. In those cases, we process only the data elements necessary for age and identity verification and do not further use or analyze the sensitive elements.

spy77 collects personal data through the following channels:

• Direct Input: Data you actively provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, filling out a support ticket, or updating your account profile settings.
• Automated Technologies: Data collected automatically when you access or use the platform, including cookies, server log files, session tracking scripts, and device fingerprinting technology used for fraud prevention and responsible gaming monitoring.
• Third-Party Verification Providers: Identity and age verification data returned to spy77 by licensed KYC and AML screening services that process the documents you submit. These providers operate under strict data processing agreements with spy77.
• Payment Processors: Transaction confirmation data (reference numbers, timestamps, amounts, payment method identifiers) returned by payment gateways connected to Indonesian banking and e-wallet infrastructure.
• Game Providers: Aggregated gameplay and wagering data returned by third-party game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft whose titles are accessible through the spy77 platform.

spy77 processes your personal data only where it has a clear, legitimate purpose for doing so. The table below sets out each processing purpose, the specific data category involved, and the lawful basis on which that processing rests:

Where spy77 processes your data on the basis of your consent (for example, for optional marketing communications), you retain the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

spy77 does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• KYC and AML Verification Providers: Licensed identity verification and sanctions-screening services that process identity documents and cross-reference your information against international watchlists. These providers are bound by data processing agreements requiring them to handle your data with equivalent safeguards to those applied by spy77.
• Payment Processing Partners: Indonesian banking institutions and e-wallet operators (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, GoPay, DANA, ShopeePay, and LinkAja) and the payment gateway infrastructure connecting spy77 to those providers. Only the minimum data necessary to process the specific transaction is shared.
• Game Technology Providers: Third-party game studios whose titles are offered on the spy77 platform may receive limited session and wagering data necessary to render and record gameplay. These providers are contractually prohibited from using your data for any purpose beyond game delivery.
• Legal and Regulatory Authorities: Where required by a valid court order, regulatory direction, law enforcement request, or other binding legal process, spy77 may disclose personal data to the relevant authority. We will notify you of such a disclosure wherever legally permitted to do so.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of substantially all of spy77's assets, your personal data may be transferred to the acquiring entity, provided that the acquirer is bound by privacy obligations no less protective than those set out in this Policy.

Given that spy77 operates as an internationally licensed gaming platform, some of the third-party service providers with whom we share data (such as KYC verification providers and game studios) may process your personal data in countries outside Indonesia. These transfers are conducted under appropriate safeguards, including contractual clauses that require the receiving party to protect your data to a standard at least equivalent to the protections provided by this Policy.

By using the spy77 platform and submitting your personal data, you acknowledge and consent to the potential transfer of your data to jurisdictions outside Indonesia for the purposes described in this Policy, subject always to the safeguard arrangements described above.

spy77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active membership plus a minimum of five (5) years following account closure, in compliance with international AML and financial record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with international financial reporting and AML standards.
• KYC Documents: Retained for the duration of the membership plus five (5) years post-closure. Copies are held in a secure, access-controlled environment with strict internal access logging.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years to support dispute resolution and quality assurance purposes.
• Technical and Usage Data: Aggregated analytical data is retained for up to two (2) years. Raw session logs are retained for up to 12 months for fraud investigation purposes, after which they are anonymized or deleted.
• Marketing Preferences: Retained until you withdraw consent or close your account, plus an additional period of 12 months to process any outstanding opt-out requests.

When the applicable retention period expires, spy77 will securely delete or anonymize your personal data so that it can no longer be associated with you as an identifiable individual.

spy77 uses cookies and similar client-side tracking technologies to deliver a functional, personalized, and secure platform experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies maintain your logged-in session, remember your language and currency display preferences, and enable the secure cashier to operate. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to measure how the platform is used — which pages are visited most frequently, how Members navigate between sections, and where technical errors occur. This information is used exclusively to improve the platform. Analytics data is aggregated and does not identify you as an individual.
• Functional Cookies: Used to remember your optional preferences, such as your last-played game category, preferred deposit method, and notification settings, so that these are pre-selected on your next visit.
• Fraud Prevention & Security Cookies: Used alongside device fingerprinting to detect suspicious login activity, identify duplicate account attempts, and enforce responsible gaming controls including deposit limit and self-exclusion enforcement across devices.

spy77 does not deploy third-party advertising or retargeting cookies. You will not see spy77 advertisements follow you around the internet as a result of visiting this platform.

Most browsers allow you to control cookie behavior through browser settings. Blocking strictly necessary cookies will prevent you from logging in and using the platform. Blocking other cookie types may reduce the quality of your platform experience but will not prevent access to most features.

spy77 implements a layered security architecture to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the spy77 servers is encrypted using industry-standard TLS protocols. The padlock icon visible in your browser confirms that your connection is secure at all times.
• Encrypted Data Storage: Sensitive data fields including identity document files, financial information, and authentication credentials are stored in an encrypted state within spy77's database infrastructure.
• Access Control: Access to personal data within spy77's internal systems is restricted on a strict need-to-know basis. Staff members with access to Member data are subject to confidentiality obligations and undergo background screening.
• Two-Factor Authentication (2FA): spy77 offers optional two-factor authentication for Member accounts and mandates it for internal administrative access to data systems.
• Intrusion Detection and Monitoring: spy77's infrastructure is monitored 24/7 for anomalous activity, including failed login attempts, unusual data access patterns, and potential SQL injection or scripting attacks.
• Regular Security Audits: spy77 engages independent cybersecurity professionals to conduct periodic penetration testing and vulnerability assessments of its platform infrastructure.

As a Member of the spy77 platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact spy77 at [email protected]. We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data spy77 holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data spy77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Account profile details can also be updated directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data in circumstances where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing has no legitimate basis. This right is subject to spy77's legal obligations to retain certain data categories for the retention periods specified in Section 8.
• Right to Restrict Processing: You may request that spy77 temporarily restrict the processing of your data — for example, while the accuracy of the data is under dispute, or while a complaint regarding the lawfulness of processing is being investigated.
• Right to Data Portability: Where spy77 processes your data on the basis of your consent or performance of a contract, and where processing is carried out by automated means, you have the right to receive a structured, machine-readable copy of your data for transfer to another data controller.
• Right to Object: You have the right to object to spy77 processing your data on the basis of legitimate interest, in particular for direct marketing purposes. Where you object to marketing processing, spy77 will cease that processing immediately and update your preferences record.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The spy77 platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts where a Member's age cannot be confirmed will be suspended pending verification.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on spy77 or submitted personal data to the platform, please contact us immediately at [email protected]. Upon confirmation, we will promptly close the account, delete any personal data collected, void any wagering activity, and return any real-money balance to the payment source used for deposit.

spy77 recommends that parents and guardians use internet filtering software to restrict access to online gambling websites on devices shared with or accessible to minors. Please visit the Responsible Gaming page for further guidance on protecting younger household members from exposure to gambling content.

The spy77 platform integrates with third-party service providers — including game studios, payment processors, and support tools — that are necessary for the operation of the platform. While spy77 exercises due diligence in selecting reputable partners and requires all partners to operate under data processing agreements, spy77 is not responsible for the independent privacy practices of third-party providers.

Game titles delivered by providers such as Evolution Gaming, Pragmatic Play Live, NetEnt, Microgaming, Spribe, and Pocket Games Soft are rendered through iframes or API connections. By playing these games, you may be subject to additional data processing by the game provider in accordance with their own privacy policies, primarily for the purpose of game integrity verification and fair-play certification.

spy77 does not endorse or accept responsibility for the content or privacy practices of any third-party website or service provider. If you are redirected to a third-party environment for any reason, we encourage you to review that party's privacy policy independently.

spy77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will notify active Members by email to their registered address and/or by displaying a prominent notice on the platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the spy77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should cease using the platform and may request account closure as described in the Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how spy77 is protecting your information.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how spy77 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the spy77 platform. Native Indonesian-speaking support agents are available at all times for Members who prefer to discuss privacy matters in their first language.
• Email: [email protected] — please include "Privacy Request" in your subject line to ensure your inquiry is routed promptly to our data protection team. Allow up to 48 hours for acknowledgment and up to 30 days for a full substantive response.