Privacy Policy — oyo77

The following terms, when capitalised in this Privacy Policy, carry the meanings set out below:

• "oyo77" / "we" / "us" / "our" — the online betting platform operated at https://oyo77.cam and its operating entity.
• "Platform" — the oyo77 website, mobile-optimised site, and any associated digital services.
• "User" / "you" / "your" / "Player" — any natural person who accesses, browses, or holds a registered account on the Platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" — oyo77, as the entity that determines the purposes and means of Processing your Personal Data.
• "Third-Party Processor" — a service provider engaged by oyo77 that processes Personal Data on oyo77's behalf, subject to contractual data protection obligations.
• "KYC" — Know Your Customer identity verification process applied to verify a Player's identity, age, and payment method ownership.
• "Effective Date" — 1 January 2026, being the date this Privacy Policy came into force in its current version.

This Privacy Policy applies to all Personal Data collected and processed by oyo77 in connection with your use of the Platform — whether you are a registered Player, a visitor browsing without an account, or a person who contacts us through our support channels.

oyo77's primary market is Indonesia. This policy is designed to be consistent with internationally recognised data protection principles and respects the privacy rights of players across all Indonesian provinces, including Jakarta, Surabaya, Bandung, Bali, Medan, Semarang, Makassar, and Yogyakarta.

oyo77 collects Personal Data across the following categories:

4.1 Directly From You

The majority of Personal Data oyo77 holds is provided directly by you during account registration, KYC verification, payment processing, and when you contact our support team. This includes all Identity, Contact, and Financial Data categories listed in Section 3.

4.2 Automatically During Platform Use

When you visit or use the oyo77 Platform, we automatically collect Technical Data through server logs, cookies, and similar tracking technologies. This data is collected passively and does not require any action on your part beyond visiting the site. See Section 10 for our full Cookies Policy.

4.3 From Third-Party Verification Providers

During KYC verification, oyo77 may engage third-party identity verification services. These services compare the documents you submit against public or licensed databases to confirm authenticity. The verification service processes your identity data on oyo77's behalf under a data processing agreement.

4.4 From Payment Processors

When you make a deposit or withdrawal via a bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment provider may share transaction confirmation data with oyo77 to reconcile your account balance. oyo77 does not receive your full bank account password or e-wallet PIN from any payment provider.

oyo77 processes Personal Data for the following specific purposes:

• Account Management: To create, maintain, and administer your oyo77 account, including password resets and account security alerts.
• Identity Verification (KYC): To verify your age (21+), identity, and payment method ownership as required under our responsible gaming and anti-money laundering obligations.
• Payment Processing: To process deposits and withdrawals in Indonesian Rupiah (IDR) via your selected bank or e-wallet, and to maintain an accurate transaction record.
• Service Delivery: To enable you to place bets on sports markets (BRI Liga 1, EPL, La Liga, Champions League), play live casino games, participate in togel (Indonesia's traditional numbers lottery) draws, and access all other platform features.
• Customer Support: To respond to queries submitted via live chat, email, or WhatsApp, and to maintain a record of support interactions for quality purposes.
• Responsible Gaming: To monitor wagering behaviour for signs of problem gambling, to administer deposit limits, session time-outs, and self-exclusion requests, and to fulfil our duty of care obligations.
• Fraud Prevention & Security: To detect and prevent fraudulent transactions, bonus abuse, money laundering, and unauthorised account access.
• Legal Compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, user experience, and product development.
• Marketing Communications: To send promotional communications regarding bonuses, new features, and seasonal offers — subject to your marketing preferences (you may opt out at any time).

oyo77 relies on the following legal grounds to process your Personal Data:

• Contractual Necessity: Processing required to perform the contract between oyo77 and you — specifically, to operate your account, process wagers, and handle payments.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out for oyo77's legitimate business interests — such as fraud detection, platform security, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: Where oyo77 relies on consent as its legal basis (for example, for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

oyo77 may share your Personal Data with the following categories of recipients:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process financial transactions.
• Identity Verification Providers: Third-party KYC service providers engaged to verify the authenticity of identity documents submitted during registration.
• Game Studios: Licensed game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive minimum necessary data (e.g., session token, currency) to deliver game content. They do not receive your full identity or financial details.
• Fraud Prevention Services: Specialist fraud detection and prevention platforms that help oyo77 identify and block fraudulent or money-laundering activity.
• Cloud and Infrastructure Providers: Hosting and database service providers that store oyo77 platform data on secured infrastructure under data processing agreements.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory request, oyo77 may disclose Personal Data to Indonesian or international law enforcement and regulatory bodies.
• Professional Advisers: Lawyers, accountants, and auditors who provide professional services to oyo77 under confidentiality obligations.

All Third-Party Processors are contractually bound to process your data only on oyo77's instructions, for the specified purpose, and in accordance with applicable data protection standards.

oyo77 is operated by an entity subject to international licensing standards. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside Indonesia. Where such transfers occur, oyo77 implements appropriate safeguards including:

• Standard contractual clauses with all Third-Party Processors located outside Indonesia, ensuring your data is afforded equivalent protection to that described in this policy.
• Limiting cross-border data flows to the minimum necessary for the operational purpose.
• Conducting due diligence on the data protection standards of any Third-Party Processor before engagement.

oyo77 retains Personal Data for the following periods, or such longer periods as may be required by applicable law:

• Account Data (Identity, Contact): Retained for the duration of your active account plus five (5) years following account closure, to satisfy potential legal or regulatory enquiries.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with anti-money laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Wagering History: Retained for the duration of the account plus two (2) years following closure, for dispute resolution and responsible gaming review purposes.
• Support Communications: Retained for two (2) years from the date of the interaction.
• Technical / Log Data: Retained for up to twelve (12) months, after which it is deleted or anonymised.

Where data is no longer required for any legitimate purpose, oyo77 will securely delete or irreversibly anonymise it in accordance with our internal data lifecycle management procedures.

The oyo77 Platform uses cookies and similar technologies to provide a functional, secure, and personalised experience. The cookies we use fall into the following categories:

• Essential Cookies: Required for the Platform to function correctly, including session management, login state persistence, and security features. These cannot be disabled without impairing core platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players use the Platform — pages visited, session duration, and navigation paths — to help us improve the user experience.
• Preference Cookies: Store your settings and preferences (e.g., odds format, language preference) so they are remembered across sessions.
• Security Cookies: Used to detect and prevent fraudulent activity, including cross-site request forgery protection and bot detection.

Most modern browsers allow you to manage cookie preferences through the browser's settings menu. Disabling essential cookies may affect your ability to use certain Platform features, including account login and payment processing.

oyo77 implements a multi-layered approach to data security, including:

• SSL/TLS Encryption: All data transmitted between your browser or device and oyo77's servers is encrypted using current-standard TLS protocols.
• Access Controls: Personal Data is accessible only to authorised oyo77 personnel with a legitimate operational need. Access is controlled via role-based permissions, strong authentication, and audit logging.
• Password Security: Account passwords are stored in hashed form and are never visible to oyo77 staff. We recommend Players use unique, complex passwords and enable any available two-factor authentication.
• Infrastructure Security: oyo77's servers are hosted in secure data centres with physical access controls, network monitoring, and intrusion detection systems.
• Regular Security Audits: oyo77 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities.

While oyo77 employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying oyo77 immediately if you suspect unauthorised access.

As an oyo77 Player, you have the following rights regarding your Personal Data. To exercise any of these rights, contact our support team using the details in Section 15.

oyo77 will respond to data rights requests within 30 days of receipt. Where a request is complex or we have received a large number of requests, we may extend this period by up to a further 30 days, of which we will notify you.

Age verification is applied to every new account registration on oyo77. Where oyo77 discovers that a Player has misrepresented their age during registration, the relevant account will be immediately closed, all wagers voided, and any deposits returned to the source payment method less any applicable processing costs, in accordance with our Terms & Conditions.

If a parent or guardian believes their child has created an account on oyo77, please contact our support team immediately at [email protected]. We will investigate and take appropriate action as a matter of urgency.

oyo77 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a new category of data being collected, a new purpose of processing, or a change in retention periods — oyo77 will notify registered Players via their registered email address at least 7 days before the amended policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how oyo77 protects your data. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised policy.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the oyo77 Data Protection team using the details below. All data-related requests are handled confidentially and in accordance with our documented procedures.

If you are dissatisfied with oyo77's response to a data rights request or privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. oyo77 will cooperate fully with any such regulatory investigation.