Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "ris77" / "we" / "us" / "our" refers to the online gaming platform operating at https://ris77.cam, including all sub-pages, features, games, and services accessible through that domain.
• "Player" / "you" / "your" means any individual who accesses, browses, registers on, or interacts with the ris77 Platform in any capacity.
• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, phone number, device identifiers, IP address, payment details, and transaction history.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, transmission, and deletion.
• "KYC" (Know Your Customer) means the identity verification procedure through which ris77 confirms a Player's identity, age, and source of funds before processing withdrawals or increasing account limits.
• "Third-Party Processors" means payment providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), game content studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), identity verification services, and any other external service provider that processes Personal Data on our behalf.
• "Cookies" means small text files placed on your device by the ris77 Platform for the purposes of session management, preference storage, analytics, and fraud detection.
• "WIB" means Western Indonesia Time (UTC+7), which is the default time zone for all ris77 operational references.

ris77 collects Personal Data through three primary channels: information you provide directly, information generated automatically by your use of the Platform, and information received from trusted Third-Party Processors. The table below summarizes each category.

ris77 processes your Personal Data only for the purposes set out below. We do not use your data in ways that are incompatible with these stated purposes without first seeking your consent.

• Account Creation and Management. To register your account, authenticate your login sessions, maintain your account settings and preferences, and provide you with access to all ris77 services.
• Identity Verification (KYC). To verify that you are at least 21 years of age, to confirm your identity before processing withdrawals, and to comply with applicable anti-money-laundering and know-your-customer obligations under our international gaming license.
• Payment Processing. To facilitate deposits and withdrawals via your chosen Indonesian payment method — including local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja) — and to maintain accurate financial records of all transactions in IDR.
• Fraud Prevention and Security. To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and any other prohibited conduct described in our Terms & Conditions. This includes device fingerprinting, IP analysis, and behavioral anomaly detection.
• Responsible Gaming Compliance. To monitor for signs of problem gambling behavior, to enforce self-exclusion requests, deposit limits, and session time restrictions, and to ensure that the Platform is not accessed by individuals who have voluntarily self-excluded.
• Customer Support. To respond to your inquiries, complaints, and support requests, and to maintain a record of communications for quality assurance and dispute resolution purposes.
• Service Improvement. To analyze aggregated usage patterns, game performance data, and Platform navigation behavior in order to improve the user experience, optimize page performance, and develop new product features.
• Marketing Communications. To send you promotional offers, bonus notifications, and event announcements — including seasonal campaigns for Ramadhan, Idul Fitri, and Indonesian Independence Day (17 August) — where you have opted in to receive such communications. You may withdraw your marketing consent at any time by emailing [email protected].
• Legal and Regulatory Compliance. To comply with applicable laws and regulations, to respond to lawful requests from regulatory authorities, and to establish, exercise, or defend legal claims arising from your use of the Platform.

ris77 processes your Personal Data on the following legal bases, consistent with internationally recognized data protection principles:

• Contractual Necessity. The majority of our processing activities are necessary to perform the contract between you and ris77 — specifically, to provide you with an operational betting and gaming account, to process your deposits and withdrawals, and to deliver the games and features you have requested.
• Legal Obligation. Certain processing activities — particularly KYC identity verification, anti-money-laundering record-keeping, and the retention of financial transaction logs — are required by the terms of ris77's international gaming license and by applicable financial crime prevention obligations. We cannot waive these requirements.
• Legitimate Interests. ris77 processes Technical Data and Usage Data on the basis of its legitimate interest in securing the Platform, preventing fraud, detecting bonus abuse, and improving the quality of services offered to all players. We have assessed that these legitimate interests are not overridden by your privacy rights, given the limited intrusiveness of this processing and its direct benefit to Platform security.
• Consent. Where ris77 processes your Personal Data for marketing communications or for non-essential cookies, we do so only with your prior, freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing that took place before withdrawal.

ris77 uses cookies and similar tracking technologies to operate the Platform effectively, maintain the security of your session, and improve your browsing experience. The categories of cookies we deploy are as follows:

ris77 does not use third-party advertising cookies or deploy cross-site tracking technologies for the purpose of serving behavioral advertising on external websites. All cookies set on the ris77 domain are first-party or strictly operational third-party cookies directly related to Platform security and game delivery.

ris77 does not sell, rent, or trade your Personal Data. We share data only in the specific circumstances described below, and only to the minimum extent necessary for each stated purpose.

• Payment Processors. To facilitate your deposits and withdrawals, ris77 shares relevant financial identifiers with your chosen Indonesian payment provider — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. Each payment provider operates under its own privacy policy and is independently regulated.
• Game Content Providers. When you launch a game powered by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, a session token and anonymized player identifier are shared with that studio solely to initialize and manage the game session. No personally identifiable registration data is shared with game studios.
• Identity Verification Services. To complete KYC checks, ris77 may engage a third-party identity verification provider to cross-reference the documentation you submit against government and public records databases.
• Regulatory and Law Enforcement Authorities. ris77 may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, by the terms of our international gaming license, or where we are under a good-faith obligation to prevent or report financial crime.
• Corporate Transactions. In the event of a merger, acquisition, or sale of all or substantially all of ris77's assets, your Personal Data may be transferred to the acquiring entity. We will notify registered players via email before any such transfer takes effect and will ensure the receiving entity commits to equivalent privacy protections.
• Professional Advisors. ris77 may share Personal Data with its legal advisors, auditors, and insurance providers on a strictly confidential, need-to-know basis for the purposes of obtaining professional advice or managing legal risk.

ris77 operates under an international gaming license and engages Third-Party Processors whose infrastructure may be located in jurisdictions outside Indonesia. When Personal Data is transferred internationally, ris77 takes the following measures to ensure an equivalent level of protection:

• Transfer to processors located in jurisdictions recognized as providing an adequate level of data protection is conducted without additional safeguards, on the basis of that adequacy finding.
• Transfer to processors in other jurisdictions is governed by contractual clauses that impose data protection obligations equivalent to those applicable to ris77 under its gaming license, including strict security requirements and restrictions on onward transfers.
• Where a transfer is required to comply with a legal obligation or to establish, exercise, or defend a legal claim, ris77 will inform you of the transfer to the extent permitted by law.

All data transmitted between your device in Indonesia and ris77's servers is encrypted in transit using 256-bit TLS regardless of the server's physical location. Data at rest on ris77's primary and backup servers is encrypted using AES-256.

ris77 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and our gaming license obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is either permanently deleted or irreversibly anonymized so that it can no longer be linked to you as an individual.

Subject to applicable law and certain limitations arising from our legal obligations under the gaming license, you have the following rights with respect to your Personal Data held by ris77:

• Right of Access. You may request a copy of all Personal Data ris77 holds about you, together with information about how it is being processed. We will provide this within 30 days of a verified request.
• Right to Rectification. If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update most registration details directly from within your Account settings.
• Right to Erasure ("Right to Be Forgotten"). You may request that ris77 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that erasure may be limited where retention is required by our gaming license or anti-money-laundering obligations.
• Right to Restriction of Processing. You may request that ris77 restrict the processing of your Personal Data while a dispute over its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability. Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that ris77 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object. You may object at any time to processing based on ris77's legitimate interests, including profiling for fraud prevention purposes. ris77 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent. Where processing is based on your consent — including marketing communications and non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please email [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days (WIB) and fulfill it within 30 days. We may ask you to verify your identity before processing a rights request.

ris77 is an adults-only platform. Access is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under the age of 21.

During the registration process, all players are required to confirm that they are at least 21 years old. Where ris77 has reasonable grounds to suspect that a registered player is under 21, the Account will be immediately suspended pending completion of age verification. If age verification confirms the player is underage, the Account will be permanently closed, any balance will be returned to the depositing payment method, and all Personal Data associated with that Account will be deleted in accordance with applicable law.

ris77 implements a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our primary security measures include:

• 256-bit SSL/TLS Encryption. All data transmitted between your device and ris77's servers is encrypted in transit, preventing interception by third parties. This is the same encryption standard applied by major Indonesian banks including BCA, BRI, BNI, and Mandiri for their internet banking platforms.
• AES-256 Encryption at Rest. Personal Data and financial records stored on ris77's servers are encrypted at rest using the Advanced Encryption Standard with 256-bit keys.
• Multi-Factor Authentication. ris77's internal administrative systems require multi-factor authentication for all staff access. Players are encouraged to enable two-step verification on their own accounts for additional protection.
• Role-Based Access Controls. Access to player Personal Data within ris77's internal systems is strictly limited on a need-to-know basis. Customer support agents, finance teams, and compliance officers have access only to the data categories required for their specific roles.
• Regular Security Audits. ris77 commissions independent security assessments of its Platform infrastructure on a regular basis, including penetration testing and vulnerability scanning.
• Incident Response Protocol. In the event of a data security incident that poses a risk to your rights, ris77 will notify affected players without undue delay and will take immediate remediation steps.

While ris77 takes all reasonable technical and organizational precautions to protect your data, no system is entirely immune to risk. You also have a responsibility to protect your own account by using a strong, unique password and by not sharing your login credentials with any third party.

The ris77 Platform may reference third-party brands, payment providers, or game studios by name in its content. However, the Platform does not contain hyperlinks to external websites, and ris77 does not embed third-party frames or widgets that collect data independently of ris77's own infrastructure.

Where you interact with a third-party payment provider (such as OVO, DANA, GoPay, ShopeePay, or LinkAja) through a redirect or deep-link initiated by the ris77 cashier, you will be operating under that provider's own privacy policy and terms of service from the moment you leave the ris77 domain. ris77 accepts no responsibility for the privacy practices of third-party payment processors beyond its data processing agreement obligations as described in Section 6.

Similarly, game studios whose content is embedded within the ris77 Platform operate their random number generators and game logic on their own servers. While ris77 shares only anonymized session tokens with these studios, the studios' own data practices are governed by their respective privacy policies. Players are encouraged to review the privacy policies of major studios such as Pragmatic Play and Evolution Gaming for further information.

ris77 reviews this Privacy Policy on a regular basis and may update it to reflect changes in our data processing practices, applicable law, or operational requirements. The effective date at the top of this page always reflects the date the current version came into force.

Where a material change is made to this Privacy Policy — particularly any change that affects the categories of data we collect, the purposes for which we use it, or the rights available to you — ris77 will notify all registered players via the email address on file at least 14 days before the change takes effect. The updated policy will also be posted on this page with a clearly marked "Last Updated" date.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not accept the revised policy, you may close your Account by contacting [email protected] prior to the effective date; ris77 will return any eligible real-money balance to your verified payment method.

If you have any questions, concerns, or complaints regarding this Privacy Policy or ris77's data processing practices, or if you wish to exercise any of the rights described in Section 9, please contact us through the following channel:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for general questions or "Data Rights Request" for formal rights exercises.
• Response Time: ris77 aims to acknowledge all privacy-related communications within 5 business days (WIB) and to provide a substantive response within 30 calendar days of receiving a verified request.
• Data Protection Officer: ris77 has designated an internal Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and for acting as the primary point of contact for data rights requests. The DPO can be reached via the email address above with "Attn: DPO" in the subject line.
• Identity Verification: To protect your Personal Data, ris77 may ask you to verify your identity before acting on a data rights request. This typically involves confirming your registered email address, account username, and one additional piece of identifying information.
• No Cost: Exercising your data rights is free of charge. ris77 will not charge a fee for access requests, rectification, erasure, or any other rights exercise, except in cases of manifestly unfounded or excessive repetition where a reasonable administrative fee may apply.