Privacy Policy — ov777

In this Privacy Policy, the following terms carry the meanings assigned below:

• "ov777", "we", "us", or "our" — the operator of the ov777 online gaming platform at https://ov777.cam.
• "Platform" — the ov777 website, its subdomains, and all associated mobile-optimised or mirror versions.
• "Player", "you", or "your" — any individual who visits, registers on, or otherwise interacts with the Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, directly or in combination with other data (e.g., full name, email address, national ID number, IP address, payment details).
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" — Know Your Customer identity verification procedures, including document-based identity checks and payment-method verification.
• "Third Party" — any entity other than ov777 and the Player, including game providers, payment processors, and fraud-prevention vendors.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, ov777.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.

This Privacy P olicy applies to all Personal Data collected by ov777 in connection with your use of the Platform, regardless of the device or method of access. It covers:

• Personal Data collected when you register an Account or complete KYC verification.
• Personal Data generated through your gameplay activity, betting history, and financial transactions on the Platform.
• Personal Data collected through your interactions with ov777 customer support, including live chat, email correspondence, and call recordings where applicable.
• Technical data collected automatically when you visit the Platform, including IP addresses, device identifiers, and browser information.
• Personal Data collected through cookies and similar tracking technologies as described in Section 10.

This Policy does not apply to third-party websites or services that may be linked to or from the Platform. ov777 is not responsible for the privacy practices of any external site, including those operated by our game providers (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft). We encourage you to review the privacy policies of any third-party service you use independently.

ov777 collects Personal Data across the following categories. The specific data points collected depend on how you interact with the Platform:

3.1 Identity & Registration Data

• Full legal name, date of birth, and gender.
• Indonesian National Identity Card (KTP) number, passport number, or driving licence (SIM) number provided during KYC.
• Residential address in Indonesia, including city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta).
• Email address, username, and hashed password.
• Indonesian mobile phone number.
• Selfie or photograph submitted for facial verification where required.

3.2 Financial & Payment Data

• Bank account details for local Indonesian bank transfers: account holder name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon), account number, and branch details.
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja — registered phone number and account name only. ov777 does not store e-wallet PINs or passwords.
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment reference numbers — all denominated in IDR.

3.3 Gaming & Betting Activity Data

• Game session logs, including games played, bet amounts, outcomes, and session durations.
• Sports betting history across all markets, including football (bandar bola — online football bookmaking), accumulator bets (mix parlay), Asian handicap (voor bola), and other markets.
• Bonus and promotion claim history, including wagering progress records.
• Responsible gaming tool usage: deposit limits set, self-exclusion periods, session time limits, and reality-check settings.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Device fingerprint (a composite identifier derived from device hardware and software attributes, used for fraud prevention and duplicate account detection).
• Session timestamps, login/logout records, and page interaction logs.

3.5 Communications Data

• Content of live chat conversations with ov777 support agents.
• Content and metadata of email correspondence sent to or received from ov777.
• Records of formal complaints, disputes, and their resolutions.

ov777 collects Personal Data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or respond to a promotional survey.
• Automatically: through cookies, server logs, and device-fingerprinting technology as you navigate and interact with the Platform. See Section 10 for full details on cookies.
• From payment processors: transaction confirmation data is shared with ov777 by your bank or e-wallet provider to confirm successful deposits and withdrawals.
• From identity verification vendors: where ov777 uses a third-party KYC service to verify documents, that service may return a verification result and risk score to ov777.
• From fraud prevention and AML screening tools: these services may flag accounts against sanction lists or known fraud indicators, returning a risk classification that ov777 acts upon.

The table below sets out each purpose for which ov777 processes Personal Data and the legal basis on which that processing rests:

ov777 does not sell your Personal Data. We share data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

6.1 Service Providers

ov777 engages carefully vetted third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to execute deposits and withdrawals.
• KYC and identity verification vendors: receive identity document images and return a verification result. These vendors are contractually prohibited from using your data for any purpose other than verification on ov777's instruction.
• Game technology providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and other licensed studios receive anonymised or pseudonymised session data necessary to deliver game functionality. No financial or KYC data is shared with game studios.
• Fraud prevention and AML screening tools: receive hashed identity and transaction data to perform risk assessments.
• Cloud infrastructure providers: host encrypted data under strict access-control policies on ov777's behalf.

6.2 Legal and Regulatory Disclosure

ov777 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, court warrant, or applicable law. In such cases, ov777 will disclose only the minimum data required to comply with the legal obligation and, where permitted by law, will notify the affected Player.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of ov777's assets, Personal Data held by ov777 may be transferred to the successor entity as part of the transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with a minimum of 30 days' notice before the transfer takes effect.

6.4 With Your Consent

ov777 may share your data with additional third parties where you have given explicit, informed consent to that specific sharing. You may withdraw such consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

As an international online gaming platform serving players in Indonesia, ov777 may store and process Personal Data on servers located outside of Indonesia. Where Personal Data is transferred to countries that may not offer the same level of data protection as Indonesia, ov777 implements appropriate safeguards, including:

• Contractual clauses in agreements with data processors that require them to protect data to a standard equivalent to the protections described in this Policy.
• Technical measures such as end-to-end encryption so that data is protected in transit and at rest regardless of where it is physically stored.
• Access restrictions limiting which personnel can access Personal Data, based on role and operational necessity.

By registering an Account on ov777, you acknowledge and accept that your Personal Data may be transferred to, stored in, and processed in jurisdictions outside of Indonesia for the purposes described in this Policy.

ov777 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by law:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregate data (e.g., platform-wide betting volume statistics) may be retained indefinitely for analytical purposes.

ov777 implements a layered security architecture to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your browser or app and ov777 servers is encrypted using TLS 1.3, the current industry standard.
• AES-256 Encryption at Rest: Personal Data and financial records stored on ov777 servers are encrypted using AES-256 symmetric encryption.
• Role-Based Access Control (RBAC): Internal access to Personal Data is restricted to personnel who require it for their specific job function. Access is logged and periodically reviewed.
• Two-Factor Authentication (2FA): Available and strongly recommended for all player Accounts. Internal staff systems enforce 2FA as a mandatory control.
• Regular Security Audits: ov777 conducts periodic penetration testing and vulnerability assessments of its Platform infrastructure. Critical vulnerabilities are remediated on a priority basis.
• DDoS Protection: The Platform is protected by enterprise-grade DDoS mitigation services to ensure availability and to prevent data exfiltration via infrastructure attacks.
• Data Breach Response: ov777 maintains an incident response plan. In the event of a confirmed data breach affecting Player Personal Data, affected Players will be notified without undue delay and with details of the nature of the breach and recommended protective actions.

ov777 uses cookies and similar technologies (such as local storage objects and device fingerprinting) to operate the Platform effectively, keep you logged in between sessions, prevent fraud, and — with your consent — personalise your experience.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing identifiers. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations. Disabling these may reduce your Platform experience.
• Analytics Cookies: Collect anonymised information about how Players use the Platform (e.g., pages visited, features used, session duration) to help ov777 improve the user experience. These are only set with your consent.
• Fraud Prevention & Security Cookies: Used alongside device fingerprinting to detect duplicate accounts, bot activity, and suspicious login patterns. These are classified as strictly necessary for security purposes.

10.2 Managing Cookies

You can manage non-essential cookies through your browser settings at any time. Blocking strictly necessary cookies will impair your ability to log in and use the Platform. Blocking analytics cookies has no impact on core functionality. Please note that ov777 does not currently respond to "Do Not Track" browser signals, as no universally accepted standard for these signals exists.

As a Player on ov777, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 48 hours and aim to respond substantively within 30 days.

ov777 strictly prohibits the use of its Platform by any person under the age of 21. We do not knowingly collect or process Personal Data from individuals under 21 years of age. If you are a parent or guardian and believe that a minor has registered an Account or provided Personal Data to ov777 without your consent, please contact our support team immediately at [email protected].

Upon receiving a credible notification that Personal Data belonging to a minor has been collected, ov777 will promptly suspend the Account, investigate the report, and permanently delete all associated Personal Data, subject to any overriding legal retention requirement. Any financial balance associated with such an Account will be returned to the verified payment method on file after investigation.

ov777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform technology. Material changes will be communicated in the following ways:

• In-Platform Notification: A prominent banner will be displayed on the Platform for a minimum of 14 days before the change takes effect.
• Email Notification: If the change substantially affects how your Personal Data is processed or the protections available to you, ov777 will send a notification to your registered email address at least 14 days before the change takes effect.
• Updated Effective Date: The "Effective Date" at the top of this page will be revised to reflect the date on which the current version of the Policy became applicable.

Continuing to use the Platform after any amendment to this Privacy Policy takes effect constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you may close your Account and request deletion of your Personal Data in accordance with Section 11, subject to legal retention obligations.

The most current version of this Policy will always be accessible at https://ov777.cam/privacy-policy.

If you have questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to lodge a complaint regarding how ov777 handles your Personal Data, please contact our Data Protection team using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat icon on the Platform. Average response time: under 2 minutes.
• Support Hours: 24 hours a day, 7 days a week, aligned to WIB (Western Indonesia Time, UTC+7). Indonesian-speaking agents are available at all hours.

ov777 acknowledges all privacy-related enquiries within 48 hours and aims to provide a substantive response within 30 days of receipt. Complaints are escalated to our dedicated Data Protection Officer for independent review where the initial response does not resolve the matter.

If, after ov777's internal review, you remain dissatisfied with how your complaint has been addressed, you may have the right to refer the matter to the relevant data protection regulatory authority in your jurisdiction.