uji77 Privacy Policy

In this Privacy Policy, the following terms shall have the meanings set out below:

This Privacy Policy applies to all Personal Data collected by uji77 in connection with your use of the Platform, whether you access it via a desktop browser, mobile browser, or any other interface we make available. It applies equally to registered Players and to unregistered visitors who browse the Platform without creating an Account.

This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and uji77.

uji77 operates primarily to serve players located in Indonesia. Accordingly, the data-handling practices described in this policy are designed to reflect the expectations of Indonesian players and to align with internationally recognised data-protection standards, including the principles established under the EU General Data Protection Regulation (GDPR) where applicable to our international operations.

uji77 collects Personal Data in the following categories, depending on how you interact with the Platform:

We do not collect special category data (such as health data, racial or ethnic origin, religious beliefs, or political opinions) except where strictly required to honour a self-exclusion or responsible-gaming request, in which case such data is handled with the highest level of protection and restricted to our compliance team.

uji77 collects your Personal Data through three primary channels:

• Direct Submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, participating in a promotion, or contacting our support team.
• Automated Technologies: Technical and Behavioural Data collected automatically through server logs, cookies, web beacons, and similar technologies each time you interact with the Platform. See Clause 7 for full details on our use of cookies.
• Third Parties: Information received from payment processors (such as the Indonesian interbank payment network for BCA, BRI, BNI, and Mandiri transfers, and e-wallet platforms including OVO, DANA, GoPay, ShopeePay, and LinkAja), identity verification providers, fraud-screening services, and game studios whose products are available on the Platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft).

uji77 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to establish and perform the contract between you and uji77 — including Account registration, deposit and withdrawal processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable law or regulatory requirements, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) rules, and KYC verification mandates imposed by our licensing authority.
• Legitimate Interests: Processing carried out for the purpose of fraud prevention, platform security, abuse detection, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes such as marketing communications and the placement of non-essential cookies, where we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

The Personal Data we collect is used for the following purposes:

• Account Management: Creating, maintaining, verifying, and securing your uji77 Account; processing login requests; recovering access in the event of credential loss.
• Service Delivery: Processing deposits and withdrawals in IDR via supported Indonesian banks and e-wallets; delivering sportsbook, live casino, slot, and specialty game products; crediting and managing bonus promotions.
• Identity Verification & Compliance: Conducting KYC checks; screening against international sanctions and politically exposed persons (PEP) lists; fulfilling AML and CTF reporting obligations.
• Fraud & Security: Detecting and preventing fraudulent activity, unauthorised Account access, bonus abuse, multi-accounting, and the use of automated bots or scripts.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling; enforcing deposit limits, cooling-off periods, and self-exclusions requested by Players; communicating responsible gaming guidance.
• Customer Support: Responding to enquiries, disputes, and complaints submitted via live chat or email; maintaining records of communications for quality assurance and dispute resolution.
• Marketing & Promotions: Sending promotional communications about bonuses, new games, and seasonal offers relevant to Indonesian players (including campaigns aligned with Idul Fitri, Ramadhan, and Indonesian Independence Day) — only where you have consented to receive such communications. You may opt out at any time by contacting support.
• Platform Improvement: Analysing aggregated, anonymised Behavioural Data to improve site performance, game selection, payment processing speed, and user experience for players across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and the rest of Indonesia.

uji77 uses cookies and similar tracking technologies to operate and improve the Platform. We deploy the following categories of cookies:

Strictly Necessary and Security cookies are placed without requiring your consent, as they are essential to the secure and functional operation of the Platform. Functional and Analytics cookies are placed only with your consent, which you may withdraw by adjusting your browser settings to block or delete cookies. Note that disabling Functional cookies may degrade your experience on the Platform.

uji77 does not sell your Personal Data. We share it only in the following limited circumstances and only to the extent strictly necessary for each purpose:

• Payment Processors: Financial Data is shared with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit and withdrawal transactions. These providers act as independent controllers under their own privacy policies.
• KYC & Compliance Providers: Identity and Financial Data may be shared with accredited identity verification and AML screening services for the sole purpose of fulfilling our compliance obligations. All such providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.
• Game Studio Partners: Technical and session data (but not Identity or Financial Data) may be shared with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, to the extent necessary to deliver and settle game outcomes in real time.
• Group Companies: Personal Data may be shared within the uji77 group of companies for internal administrative purposes, customer support escalation, and group-level fraud monitoring, subject to equivalent data-protection standards.
• Legal Authorities: We may disclose Personal Data to law-enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of uji77, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, restructure, or sale of uji77's business or assets, Personal Data held by uji77 may be transferred to the acquiring entity, which will be required to honour the terms of this Privacy Policy.

We do not share your Personal Data with third-party advertisers, data brokers, social media platforms, or marketing agencies for any commercial purpose.

uji77 operates as an internationally licensed platform and may process or store your Personal Data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally — for example, to our licensing jurisdiction's compliance infrastructure or to the servers of a game studio partner — we ensure that appropriate safeguards are in place to maintain a standard of protection equivalent to that which applies within Indonesia.

Applicable safeguards may include contractual data-protection clauses modelled on international standards, adequacy assessments, and binding internal data-transfer policies within our corporate group. If you would like further information about the safeguards applied to any specific international data transfer, please contact us at the address in Clause 16.

uji77 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal retention obligations, and to resolve any outstanding disputes or enforce our agreements. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that renders it permanently non-identifiable. Anonymised, aggregated data may be retained indefinitely for statistical and operational purposes.

Subject to applicable law and our compliance obligations, you have the following rights in relation to the Personal Data uji77 holds about you:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and to receive information about how it is processed.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete Personal Data we hold about you. For most Account details, you can update information directly via your Account settings.
• Right to Erasure: You have the right to request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to override by our legal retention obligations, particularly AML data-retention requirements.
• Right to Restriction of Processing: You have the right to request that we restrict our Processing of your Personal Data in certain circumstances, for example while you contest the accuracy of data we hold.
• Right to Data Portability: Where Processing is based on your consent or the performance of a contract, you have the right to receive a structured, machine-readable copy of the Personal Data you have provided to us.
• Right to Object: You have the right to object to Processing based on our legitimate interests, including for direct marketing purposes. We will honour objections to direct marketing immediately.
• Right to Withdraw Consent: Where Processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact our support team via live chat or email (see Clause 16). We will respond to all valid requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

The Platform is strictly prohibited for use by any person under the age of 21. uji77 does not knowingly collect Personal Data from individuals under 21. If we become aware that a minor has provided us with Personal Data or has registered an Account, we will immediately close the Account, delete all associated Personal Data, and refund any real-money deposits to the payment method of origin.

If you are a parent or guardian and believe that a person under 21 in your care has accessed the Platform or provided personal information to uji77, please contact our support team immediately via live chat. We take all such reports seriously and will investigate and act on them without delay.

We strongly encourage the use of parental control software and filtering tools to prevent underage access to online gambling platforms. uji77 supports national and international responsible gambling initiatives and cooperates with organisations that promote the protection of minors from gambling harm.

uji77 implements a comprehensive, layered security framework to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your browser or device and the Platform is encrypted using TLS 1.2 or higher, securing your credentials, payment details, and session data against interception.
• Encryption at Rest: Sensitive Personal Data stored in our databases — including Identity Data, Financial Data, and KYC documents — is encrypted using AES-256 encryption.
• Access Controls: Access to systems containing Personal Data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls, multi-factor authentication, and audit logging.
• Penetration Testing: Our platform and infrastructure undergo regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: We maintain a documented security incident response plan. In the event of a Personal Data breach that poses a risk to your rights and freedoms, we will notify affected Players without undue delay and in accordance with applicable legal requirements.

While we apply industry-leading technical and organisational security measures, no transmission over the internet or electronic storage system is entirely free from risk. You are responsible for maintaining the security of your own Account credentials and for notifying us immediately if you suspect any unauthorised access to your Account.

The Platform does not contain links to external third-party websites for general browsing purposes. However, game studio interfaces embedded within the Platform may reference their own privacy policies and terms of service. uji77 is not responsible for the privacy practices or content of any third-party service that operates independently of our Platform.

The game studios whose products are available on uji77 — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — operate under their own data-protection frameworks. Where these studios process Technical or session data in connection with game delivery, they do so in accordance with their own published privacy policies and with the data-sharing agreements we have in place with each studio.

uji77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or regulatory requirements. When we make a material change — one that substantially affects your rights or the way we use your Personal Data — we will provide at least seven (7) days' prior notice by posting a prominent notice on the Platform and sending an email to your registered address.

For minor clarifications or corrections that do not substantively alter your rights, we may update the policy without prior notice. The "Last Updated" date at the top of this page will be revised each time the policy is amended.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the amended policy, you must stop using the Platform and contact us to close your Account.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy-related complaint, please contact the uji77 Data Protection team through any of the following channels:

• Live Chat: Available 24/7 via the Platform. This is the fastest channel for urgent Account and privacy matters. Our support agents include native Indonesian-speaking staff available across WIB, WITA, and WIT time zones.
• Email: [email protected] — please include "Privacy Request" or "Data Rights" in the subject line to ensure prompt routing to our compliance team. We aim to acknowledge all privacy-related enquiries within 48 hours.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data-protection supervisory authority in your jurisdiction. uji77 will cooperate fully with any regulatory investigation arising from a privacy complaint.