Privacy Policy — ac777

ac777 ("we", "us", "our", or "the Company") operates the online gambling and sports betting platform accessible at ac777.cam and all associated sub-domains. This Privacy Policy describes how we collect, use, store, disclose, and safeguard personal data relating to individuals ("you", "your", or "the Player") who register for an Account, make a deposit, place a wager, or otherwise interact with any part of the ac777 Platform.

This Policy applies to all players accessing ac777 from Indonesia — including those in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, Palembang, and all other regions of the archipelago — as well as to any person who contacts ac777 support, participates in a promotion, or visits the Platform without registering.

By creating an Account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform immediately and contact support to request Account closure.

This Privacy Policy should be read alongside the ac777 Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference.

We collect personal data in several categories depending on how you interact with the Platform. The table below summarises the categories of data we may hold about you:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data unless you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request, in which case such information is processed solely to give effect to your exclusion request and is not used for any other purpose.

ac777 collects personal data through the following channels:

3.1 Directly From You

The majority of the personal data we hold is provided directly by you during the following interactions:

• Completing the registration form to create your ac777 Account;
• Submitting KYC identity verification documents (KTP, passport, bank statement, e-wallet screenshot);
• Making a deposit via your preferred Indonesian bank (BCA, BRI, BNI, Mandiri, etc.) or e-wallet (GoPay, OVO, DANA, ShopeePay, LinkAja);
• Contacting ac777 customer support via live chat or email;
• Responding to promotions, surveys, or other communications from ac777;
• Configuring responsible gaming tools such as deposit limits or self-exclusion.

3.2 Automatically

Certain Technical Data and Usage Data is collected automatically when you access the Platform, through the use of server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser characteristics, and session activity. See Section 9 (Cookies & Tracking) for full details.

3.3 From Third Parties

We may receive data about you from the following trusted third parties:

• KYC / identity verification providers — services that cross-reference submitted documents against official databases to confirm your identity and age;
• Payment processors — Indonesian banks and e-wallet operators who confirm transaction status and account ownership;
• Fraud and AML screening providers — services that flag accounts associated with known fraudulent or money-laundering activity;
• Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) — game result and session data required for dispute resolution and audit purposes.

We process your personal data only for defined, legitimate purposes. The table below maps each processing purpose to the categories of data involved:

We will not process your personal data for any purpose not listed above without first obtaining your explicit consent or having a clear legal obligation to do so.

ac777 processes personal data under one or more of the following legal bases depending on the activity:

• Contractual necessity: Processing required to perform the contract between ac777 and the Player — including account creation, deposit and withdrawal processing, KYC verification, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, fraud prevention requirements, and record-keeping obligations imposed by our international gaming licence conditions.
• Legitimate interests: Processing required for fraud detection and prevention, platform security, analytics used to improve service quality, and communications necessary to protect ac777's business operations — provided these interests are not overridden by your rights.
• Consent: Processing for optional purposes such as marketing communications and the placement of non-essential cookies. You may withdraw consent at any time without affecting processing carried out before withdrawal.

ac777 does not sell or rent your personal data. We share data only as described below, and only to the minimum extent necessary for the stated purpose:

6.1 Service Providers

We engage third-party service providers who process personal data on our behalf and under our instructions. These include:

• KYC and identity verification platforms;
• Payment gateway and banking integration providers facilitating transactions with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, GoPay, OVO, DANA, ShopeePay, and LinkAja;
• Cloud hosting and infrastructure providers;
• Fraud screening and AML monitoring services;
• Customer support platform providers;
• Email and notification delivery services.

All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service to ac777.

6.2 Game Studios

When you play games powered by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, or Spribe — limited session and result data is shared with the relevant studio solely for the purpose of game delivery, outcome verification, and dispute resolution. These studios are contractually prohibited from using this data for independent marketing or profiling purposes.

6.3 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud or financial crime. We will notify you of any such disclosure where we are legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ac777's business, personal data held by ac777 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified before their data is transferred and becomes subject to a different privacy policy.

ac777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and audit obligations. The following retention periods apply as a general guide:

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you. Where data is anonymised rather than deleted, the anonymised dataset may be retained for statistical and analytical purposes indefinitely, as it no longer constitutes personal data.

ac777 maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key technical and organisational measures include:

• Transport encryption: All data transmitted between your browser or mobile device and ac777 servers is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites;
• Encryption at rest: Sensitive data including KYC documents and financial records is encrypted at rest on our storage infrastructure;
• Password hashing: Account passwords are never stored in plain text. We use adaptive cryptographic hashing algorithms (bcrypt) that are resistant to brute-force attacks;
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Employees who require access to perform their duties are subject to background checks, confidentiality obligations, and regular security training;
• Intrusion detection: Our infrastructure is monitored 24/7 by automated intrusion detection and anomaly-alerting systems;
• Penetration testing: Independent third-party penetration tests are conducted at least annually to identify and remediate vulnerabilities before they can be exploited;
• Incident response: ac777 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you as required by applicable law, typically within 72 hours of becoming aware of the incident.

ac777 uses cookies and similar technologies (collectively "cookies") to operate the Platform, remember your preferences, analyse usage patterns, and support our security systems. A cookie is a small text file stored on your device by your browser when you visit a website.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged into your Account, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Performance & analytics cookies: These cookies collect aggregated, anonymised information about how players use the Platform — which pages are visited most, where players navigate from, and how long sessions last. This data helps us improve the Platform. No personally identifiable information is collected by these cookies.
• Functional cookies: These remember your preferences such as language display, odds format, deposit method last used, and responsible gaming reminder intervals, so you do not need to re-enter your preferences each session.
• Security cookies: Used to detect fraudulent login attempts, flag unusual session behaviour, and enforce geographic access controls.

9.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely, or to block cookies from specific websites. Note that disabling strictly necessary cookies will prevent you from logging into your Account. Detailed instructions for managing cookies in popular browsers are available in each browser's help documentation.

9.3 No Cross-Site Tracking

ac777 does not use third-party advertising networks, social media tracking pixels, or cross-site behavioural tracking tools on the Platform. Our analytics are first-party only and do not profile your activity outside of ac777.cam.

As an ac777 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat at ac777.cam or email us at [email protected] (plain text address — not a clickable link). We will respond within 30 days of receiving your request.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is processed and with whom it is shared.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer needed for the original purpose, where you have withdrawn consent (and no other legal basis applies), or where you object to processing on the basis of legitimate interests and your interests override ours. Note that we are unable to delete data we are legally required to retain (e.g., AML-related transaction records for 5 years).
• Right to restrict processing: You may request that we pause processing of your data while a dispute about accuracy or legitimate interest is being resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a machine-readable copy of the data you provided to us.
• Right to object: You have the right to object at any time to processing of your personal data for direct marketing purposes, including profiling for marketing. You also have the right to object to processing based on legitimate interests; we will stop unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The ac777 Platform is strictly for adults. You must be at least 21 years of age to register an Account, make a deposit, or participate in any game or betting activity on the Platform. This age requirement reflects both ac777's internal policy and our commitment to responsible gambling in the Indonesian market.

ac777 does not knowingly collect personal data from individuals under the age of 21. During the KYC verification process, we verify the date of birth stated at registration against government-issued identification. Any Account where the Player is found to be under 21 will be permanently closed immediately upon discovery, all associated data will be deleted, and any deposited funds will be returned to the original payment method after verification.

If you are a parent or guardian and believe that your child under the age of 21 has registered an Account with ac777, please contact our support team immediately via live chat at ac777.cam so we can close the Account and delete the data without delay.

We strongly encourage parents and guardians of minors to install parental control software and to have open conversations about the risks of online gambling. ac777 supports Indonesia's child protection objectives and takes under-age access to gambling platforms extremely seriously.

ac777 operates infrastructure and engages service providers in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Indonesia. These transfers are carried out under appropriate safeguards to ensure that your data receives a level of protection consistent with this Privacy Policy.

Safeguards for international data transfers may include:

• Standard contractual clauses (data processing agreements) requiring the recipient to apply data protection standards equivalent to those described in this Policy;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by recognised international data protection authorities;
• Technical safeguards such as end-to-end encryption that limit the ability of any party in the transfer chain to access the raw personal data.

You may request details of the specific safeguards in place for any international transfer of your data by contacting our support team at [email protected] (plain text — not a clickable link).

ac777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When a material change is made to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page;
• Send a notification to your registered email address summarising the key changes, no fewer than 7 days before the revised Policy takes effect — except where an immediate update is required by law or regulation;
• Display a prominent notice on the Platform homepage drawing attention to the update.

Your continued use of the ac777 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you must cease using the Platform and contact support to request Account closure and return of any Real Money Balance.

We encourage you to review this Privacy Policy periodically. The current version is always accessible at ac777.cam/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ac777 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week at ac777.cam — average first-response time under 60 seconds;
• Email: [email protected] (plain text — not a clickable link);
• Support Hours: 24/7, including all Indonesian national public holidays;
• Languages: Indonesian-speaking support agents are available for all player inquiries, even though the Platform itself is in English.

We are committed to resolving all privacy-related inquiries promptly and transparently. If you are unsatisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.