Privacy Policy

1. Introduction and Scope

yss77 ("we," "us," or "our") operates the online gaming platform accessible at https://yss77.cam and any associated interfaces or mobile-optimized pages (collectively, the "Platform"). We provide casino games, live dealer tables, sports betting services — including football betting (bandar bola) and traditional Indonesian games such as togel (numbers lottery) and sabung ayam (cockfighting) — to registered players located in Indonesia.

This Privacy Policy ("Policy") describes how yss77 collects, processes, stores, shares, and protects personal information in connection with your use of the Platform. It applies to all players, visitors, and any other individuals whose data yss77 processes in the course of operating its services.

By registering an account, making a deposit, or otherwise using the yss77 Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree, you must discontinue use of the Platform immediately.

2. Data Controller Information

yss77 acts as the data controller in respect of personal data collected through the Platform. For all privacy-related queries, data subject requests, or complaints, please direct your correspondence to our dedicated privacy team:

3. Information We Collect

yss77 collects personal information through multiple channels — directly from you during registration and account use, automatically through Platform interactions, and, where necessary, from third parties for verification and fraud prevention purposes. The categories of information we collect include:

3.1 Information You Provide Directly

• Identity Data: Full legal name, date of birth, nationality, and gender.
• Contact Data: Residential address (city, province, postal code — relevant for serving players across Jakarta, Surabaya, Medan, Bandung, Bali, and other Indonesian cities), email address, and mobile phone number.
• Account Credentials: Username and hashed password (passwords are never stored in plain text).
• Financial Data: Indonesian bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, and others), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records.
• Verification Documents: Copies of government-issued photo ID (Indonesian KTP, passport, or driver's license), proof-of-address documents, and payment method ownership evidence submitted during KYC procedures.
• Communications: Content of messages sent to our customer support team via live chat or email, and any feedback or survey responses you submit.

3.2 Information Collected Automatically

• Technical Data: IP address, device type and operating system, browser type and version, screen resolution, and time zone.
• Usage Data: Pages visited, games played, bet amounts, session duration, click-through patterns, and in-game activity logs.
• Cookies and Tracking Data: Information collected via cookies, web beacons, pixel tags, and similar technologies as described in Section 6.
• Transaction Logs: Timestamps and records of all deposits, withdrawals, bonus claims, game rounds, and account balance changes.

3.3 Information from Third Parties

• Identity Verification Providers: Third-party KYC and AML screening services that cross-reference your identity information against databases and sanctions lists.
• Payment Processors: Fraud-prevention signals and transaction status information from Indonesian banks, e-wallet providers, and payment gateways.
• Analytics Partners: Aggregated behavioral analytics from trusted providers to help us improve Platform performance.
• Responsible Gaming Services: Self-exclusion registry information where you have registered a self-exclusion with a relevant service.

3.4 Summary of Data Categories and Purposes

4. How We Use Your Information

yss77 uses the personal information described above for the following purposes:

• Account Creation and Management: Registering your account, verifying your identity and age (minimum 21 years), maintaining account security, and managing your gaming preferences.
• Payment Processing: Facilitating deposits from and withdrawals to your registered Indonesian bank accounts and e-wallets. Processing financial transactions through BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and other supported providers.
• Legal and Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, international sanctions screening, and regulatory reporting duties.
• Fraud and Security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, bonus abuse, and other unlawful or prohibited activities.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling, enforcing player-set responsible gaming limits, and administering self-exclusion requests.
• Customer Support: Responding to queries, resolving disputes, processing complaints, and providing technical assistance through our 24/7 support channels.
• Platform Improvement: Analyzing usage patterns and technical performance data to enhance gaming features, optimize page load times, and develop new services.
• Marketing and Promotions: Sending promotional communications about bonuses, tournaments, and platform updates to players who have provided explicit consent. You may withdraw consent at any time by contacting support.
• Legal Claims: Establishing, exercising, or defending legal claims related to yss77 services, as permitted by applicable law.

5. Legal Basis for Processing

yss77 processes personal data on the following legal grounds:

• Performance of Contract: Processing necessary to fulfill our obligations under the Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable AML, KYC, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing, optional analytics, and non-essential cookies — undertaken only where you have given clear, informed, and freely withdrawable consent.

6. Cookies and Tracking Technologies

yss77 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you visit the Platform.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for Platform functionality, including authentication sessions, security tokens, and load-balancing. These cannot be disabled without impairing core services.
• Performance Cookies: Collect anonymized data on page visits and error rates to help us improve Platform performance and reliability.
• Functionality Cookies: Store your preferences such as language settings, game display options, and lobby layout customizations.
• Analytic s Cookies: Used with your consent to understand user behavior across the Platform and measure the effectiveness of our content and features.
• Marketing Cookies: Placed with your consent to deliver relevant promotional content and track the performance of bonus campaigns.

6.2 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security settings menu. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Withdrawing consent for analytics or marketing cookies will not affect your ability to play games or process transactions.

For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation. Changes to cookie preferences take effect from the date of the change and do not apply retroactively to data already collected.

7. Data Sharing and Third Parties

yss77 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

7.1 Service Providers and Data Processors

We engage carefully vetted third-party service providers who process personal data on our behalf and under our documented instructions. These include:

• Payment Infrastructure Providers: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your financial transactions.
• KYC and AML Screening Providers: Third-party identity verification services that validate your documents and screen against sanctions and politically exposed person (PEP) databases.
• Game Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe may receive technical session identifiers required to deliver game content. These providers do not receive your financial or full identity data.
• Cloud Infrastructure and Hosting Providers: Secure data center and cloud service providers that host Platform data under strict contractual data protection obligations.
• Fraud Detection and Cybersecurity Firms: Specialized security providers that analyze technical signals to identify fraudulent access attempts and account takeover risks.
• Customer Support Platform Providers: Live chat and helpdesk software vendors that facilitate our 24/7 support operations. Support agents access only the account data necessary to resolve your query.

7.2 Legal and Regulatory Disclosures

yss77 may disclose personal information to regulatory authorities, law enforcement agencies, courts, or other government bodies where we are legally required or compelled to do so — for example, in response to a valid court order, regulatory investigation, or statutory reporting obligation under anti-money laundering legislation. We will notify you of such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of yss77's business assets, personal data held by yss77 may be transferred to the acquiring entity as part of the transaction. We will notify affected players via email or prominent Platform notice prior to any such transfer and ensure that the receiving entity commits to privacy protections no less stringent than those set out in this Policy.

7.4 Aggregated and Anonymized Data

yss77 may share aggregated, anonymized, or de-identified data — which cannot reasonably be used to identify any individual — with business partners, analytics providers, or the public for market research, industry reporting, or product development purposes. This sharing does not constitute disclosure of personal information.

8. International Data Transfers

yss77 primarily serves players in Indonesia, and our core data processing infrastructure is designed with the Indonesian market context in mind. However, some of our third-party service providers — including game studios, cloud infrastructure partners, and fraud detection vendors — may process data in jurisdictions outside Indonesia.

Where personal data is transferred internationally, yss77 ensures appropriate safeguards are in place, including contractual data protection clauses that require the recipient to maintain security standards consistent with this Policy. We do not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing appropriate protective measures.

If you have questions about specific international data transfers involving your personal information, please contact our privacy team at [email protected].

9. Data Retention

yss77 retains personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five years after account closure to satisfy AML and regulatory obligations.
• Transaction Records: Financial transaction logs are retained for a minimum of five years from the date of each transaction in compliance with applicable financial recordkeeping requirements.
• KYC Verification Documents: Identity documents are retained for five years following the closure of your account or the end of the business relationship.
• Support Communications: Live chat transcripts and email correspondence are retained for up to three years to facilitate dispute resolution and quality assurance.
• Marketing Data: Where consent is the legal basis, marketing preference data is retained until you withdraw consent. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Technical and Usage Logs: Server logs and session data are retained for up to 12 months for security and performance analysis, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Where full deletion is not immediately practicable due to system architecture, data is restricted from active processing until deletion is completed.

10. Security Measures

yss77 treats the security of your personal information as a primary operational concern. We implement a comprehensive set of technical and organizational measures to protect data against unauthorized access, accidental loss, destruction, or disclosure:

• Transport Layer Encryption: All data transmitted between your device and the yss77 Platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by major financial institutions and banks.
• Data-at-Rest Encryption: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. Administrative access to player data within yss77 systems requires mandatory 2FA.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access undergo background checks and receive regular data privacy training.
• Regular Security Audits: yss77 engages independent third-party cybersecurity firms to conduct penetration testing and security audits on a regular basis.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your data, we will notify you without undue delay where required by applicable law.
• PCI DSS Compliance: Payment data handling complies with Payment Card Industry Data Security Standards to safeguard financial information processed through the Platform.

11. Your Rights as a Data Subject

As a player on the yss77 Platform, you hold meaningful rights in respect of your personal information. Subject to applicable legal exceptions and regulatory obligations, you may exercise the following rights:

• Right of Access: You may request a copy of the personal data yss77 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (such as updating your contact number) can often be made directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations. Note that we are required by AML and financial regulations to retain certain records even after account closure.
• Right to Restriction of Processing: You may request that we limit the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing activities. We will cease marketing communications promptly upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. We will acknowledge your request within 72 hours and aim to respond in full within 30 days. We may request additional identification to verify your identity before processing your request.

12. Minors and Age Restrictions

yss77 strictly prohibits use of the Platform by individuals under 21 years of age. We do not knowingly collect, use, or retain personal information from minors. All account registrations are subject to mandatory age verification, and any account found to belong to an individual under 21 will be immediately closed and all associated funds returned to the verified payment source.

If you are a parent or guardian and believe your minor child has accessed or registered on the yss77 Platform, please contact our support team immediately at [email protected]. We will investigate promptly, close the account, and securely delete all personal data associated with that account.

13. Changes to This Policy

yss77 reviews this Privacy Policy periodically and reserves the right to update or amend it at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players by email and display a prominent notice on the Platform.

The effective date at the top of this Policy indicates when it was last reviewed. Your continued use of the yss77 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the Platform and may request account closure.

14. Contact and Complaints

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Privacy Team directly:

If you believe your data protection rights have been infringed and are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We encourage you to contact us first, however, so that we have the opportunity to address your concern directly before any escalation.