vio77 Privacy Policy

Introduction

vio77 ("the Company", "we", "us", "our") operates the online sportsbook and casino platform accessible at vio77.bio (the "Platform"). As part of providing the Platform to players, including our primary audience of Indonesian players, we inevitably collect and process personal data about you ("the Player", "you", "your").

This Privacy Policy applies to all personal data collected by vio77 through the Platform — including data collected at registration, during account operation, through payment processing, during identity verification (KYC), via customer support interactions, and through standard technical mechanisms such as server logs and cookies.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are published on vio77.bio. Together, these documents form the complete framework governing your relationship with the Company. By registering an account or continuing to use the Platform after this Policy takes effect, you confirm your acceptance of the data practices described herein.

Definitions

The following terms carry the meanings defined below throughout this Privacy Policy:

Data We Collect

vio77 collects only the data necessary to operate the Platform, meet our legal obligations, and deliver a secure and personalised experience. The categories of personal data we collect are set out below:

How We Collect Your Data

vio77 collects personal data through the following channels and mechanisms:

1. Direct Submission: Data you actively provide when completing the registration form, submitting KYC documentation, making a deposit or withdrawal request, completing a responsible gaming self-assessment, or contacting customer support via live chat or email.
2. Automated Technical Collection: Technical and usage data collected automatically each time you access the Platform via server logs, session trackers, and first-party cookies placed on your device.
3. Payment Processors: Transaction confirmation data received from our payment processing partners when you initiate a deposit or withdrawal through a local bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja). vio77 receives confirmation and reference data from these processors; it does not receive or store your full banking credentials.
4. Identity Verification Partners: KYC verification data returned by our third-party identity verification service providers upon completion of document checks and liveness verification.
5. Anti-Fraud and Security Systems: Device fingerprint data, behavioural analytics signals, and risk-scoring outputs generated by our fraud detection and AML compliance tools, which process Technical Data and Usage Data to identify unusual account activity.
6. Game Providers: Game session and outcome data shared with vio77 by our licensed game content providers (including Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, Spribe, and Pocket Games Soft) for the purposes of account crediting, dispute resolution, and regulatory reporting.

Legal Basis for Processing

vio77 processes personal data only where a valid legal basis exists. The applicable legal bases are:

1. Contractual Necessity: Processing is necessary to perform the contract between you and vio77 — specifically, to operate your account, process deposits and withdrawals, settle bets and game outcomes, and deliver customer support. Without this processing, we cannot provide the Platform service to you.
2. Legal Obligation: Processing is required for vio77 to comply with its obligations under applicable law and our international gaming licence, including AML and KYC verification requirements, record-keeping mandates, and the obligation to maintain audit trails for regulatory inspection.
3. Legitimate Interests: Processing is necessary for the purposes of our legitimate business interests — specifically fraud prevention, security monitoring, Platform improvement, and responsible gaming compliance — provided those interests are not overridden by your fundamental rights and freedoms.
4. Consent: Where vio77 processes data for purposes not covered by the above bases — principally for optional direct marketing communications — we will request your explicit consent in advance and will provide a straightforward mechanism to withdraw that consent at any time.

How We Use Your Data

The personal data we hold about you is used exclusively for the following purposes:

1. Account Management: Creating, operating, and maintaining your vio77 account, including authentication, balance management, transaction recording, and bonus administration.
2. Payment Processing: Validating deposit instructions, routing withdrawal payments to your registered bank account or e-wallet, and reconciling transaction records with payment processors.
3. Identity Verification (KYC): Confirming that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your account is not being used for money laundering or other unlawful purposes.
4. Regulatory Compliance: Meeting our reporting obligations to our licensing authority, maintaining the audit trails required by our AML programme, and responding lawfully to requests from competent authorities.
5. Fraud and Security: Detecting, investigating, and preventing fraudulent account activity, bonus abuse, multi-accounting, payment chargebacks, and other forms of prohibited conduct as defined in our Terms & Conditions.
6. Customer Support: Identifying you when you contact support, accessing your account and transaction history to resolve your query, and maintaining a record of our interactions for quality assurance and dispute resolution purposes.
7. Platform Performance: Analysing aggregated usage data to identify technical issues, optimise page load times, improve game lobbies, and develop new features that better serve Indonesian players.
8. Responsible Gaming: Monitoring play patterns against the deposit limits, loss limits, and session time parameters you have set, and identifying account behaviours that may indicate problem gambling for appropriate responsible gaming outreach.
9. Marketing Communications (Consent-Based): Sending you personalised promotions, bonus offers, and platform updates by email or SMS where you have opted in to receive such communications. You may unsubscribe at any time via the link in any marketing email or by contacting support.

Data Sharing & Disclosure

vio77 does not disclose personal data to third parties except in the following strictly defined circumstances:

1. Licensed Payment Processors: We share the minimum data necessary with our payment gateway partners to process deposits and withdrawals. These partners operate under binding data processing agreements and are prohibited from using your data for any purpose beyond payment processing.
2. KYC and AML Verification Vendors: We share identity document data with our licensed identity verification service providers to complete KYC checks. These vendors are certified and operate under contractual obligations consistent with the data protection standards in this Policy.
3. Game Content Providers: We share account session identifiers and stake data with licensed game providers (Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, Spribe, Pocket Games Soft) to the extent required to deliver game content, settle outcomes, and support dispute resolution. These providers do not receive your full identity or financial data.
4. Anti-Fraud and Security Partners: We share Technical Data and Usage Data with our fraud detection and cybersecurity partners for the purpose of identifying and mitigating account compromise, bonus abuse, and financial crime. These partners act as Data Processors under our instruction.
5. Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, our licensing authority, financial intelligence units, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of vio77, its players, or the public.
6. Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of substantially all of our assets, personal data held by vio77 may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, with a minimum of 30 days' advance notice.

All third parties with whom vio77 shares personal data are subject to binding contractual obligations requiring them to process data lawfully, securely, and only for the purposes for which it was shared.

Cookies & Tracking Technologies

vio77 uses cookies and similar tracking technologies to maintain your session, remember your preferences, protect against cross-site request forgery, and analyse how the Platform is used. The cookies we deploy fall into the following categories:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account. vio77 does not use third-party advertising cookies or retargeting pixels.

Data Retention

vio77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

1. Active Account Data: All personal data associated with an active account is retained for the full duration of your account's active status.
2. Post-Closure Retention: Following the closure of your account — whether voluntarily or by the Company — vio77 retains your identity, financial, and transaction records for a minimum of five (5) years. This period is mandated by our AML licensing obligations and is necessary to respond to regulatory inquiries, tax authority requests, or dispute escalations that may arise after account closure.
3. KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following account closure, or longer if required by the licensing authority's rules or an ongoing investigation.
4. Support Communications: Customer support records are retained for two (2) years following the resolution of the relevant query, or for five (5) years if the communication relates to a financial dispute, fraud investigation, or formal complaint.
5. Marketing Data: Where you have consented to marketing communications, your contact preferences are retained until you withdraw consent. Upon withdrawal, your contact details are removed from active marketing lists within 10 business days (WIB), though residual records may be retained as evidence of your consent history.
6. Technical Logs: Server access logs and security event logs are retained for twelve (12) months, after which they are aggregated and anonymised for statistical purposes.

When retention periods expire, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical and business-improvement purposes.

Security Measures

vio77 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, unlawful destruction, and misuse. Our key technical and organisational security measures include:

1. Encryption in Transit: All data transmitted between your browser and the Platform is encrypted using TLS 1.2 or TLS 1.3. Our domain enforces HTTPS with HTTP Strict Transport Security (HSTS) headers. You should always verify the padlock icon in your browser's address bar when using the Platform.
2. Encryption at Rest: Sensitive data fields in our database — including password hashes, KYC document references, and financial identifiers — are encrypted at rest using AES-256 encryption. Passwords are never stored in plaintext; we use a computationally expensive hashing algorithm with per-account salting.
3. Access Controls: Access to personal data within vio77's internal systems is governed by a strict role-based access control (RBAC) model. Only personnel with a documented operational need to access specific data categories are granted the corresponding system permissions. All internal data access is logged and auditable.
4. Infrastructure Security: The Platform is hosted on enterprise-grade infrastructure with firewall protection, intrusion detection systems (IDS), distributed denial-of-service (DDoS) mitigation, and regular vulnerability scanning. Critical systems are isolated in network segments with restricted lateral movement.
5. Payment Data Isolation: vio77 does not store full bank card numbers, bank account passwords, or e-wallet PINs. Payment processing is handled through PCI-DSS-compliant third-party gateways. vio77 receives only transaction reference numbers and confirmation statuses from these gateways.
6. Incident Response: In the event of a personal data breach that poses a material risk to your rights and freedoms, vio77 will notify affected Players promptly and take immediate remediation steps. A data breach log is maintained and reviewed by our Data Protection Officer.

Your Privacy Rights

As a vio77 player, you hold the following rights with respect to your personal data. These rights are not absolute — they are subject to applicable law, our licensing obligations, and legitimate operational constraints — but vio77 is committed to honouring them in full wherever possible:

To exercise any of the rights above, contact our Data Protection team at the address provided in Section 16. We will acknowledge your request within 5 business days (WIB) and provide a full response within 30 calendar days. We may require you to verify your identity before processing a data rights request.

Minors

The vio77 Platform is strictly intended for adults aged 21 and above. vio77 does not knowingly collect personal data from individuals under the age of 21. All prospective players are required to declare that they are aged 21 or older at the point of registration, and this declaration is subject to documentary verification during KYC.

If vio77 discovers — through KYC review, parental notification, or any other means — that personal data has been collected from an individual under the age of 21, we will immediately suspend the account, erase the personal data collected to the extent permitted by AML obligations, and decline to process any transactions associated with that account.

Third-Party Services

The Platform may contain links to third-party websites or services (for example, links to the websites of game studios or licensing bodies referenced in our content). vio77 has no control over the privacy practices of external websites and is not responsible for their content or data handling. This Privacy Policy applies exclusively to data collected through vio77.bio. We encourage you to review the privacy policies of any third-party websites you visit independently of the Platform.

Our game content providers — including Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, Spribe, and Pocket Games Soft — operate their own server-side game logic and may independently collect limited technical data (e.g., session identifiers) necessary to deliver game content. These providers are bound by contractual data protection obligations and are not permitted to use any data shared by vio77 for purposes beyond delivering and auditing game content.

International Data Transfers

vio77 is an internationally operated platform and, as a result, your personal data may be transferred to and processed in countries outside Indonesia. This occurs primarily in the following contexts: hosting infrastructure, KYC verification services, and game provider integrations. In each case, data transfers are governed by appropriate safeguards:

1. Contractual Protections: All international transfers are covered by binding data transfer agreements with our service providers that require equivalent data protection standards to those described in this Policy.
2. Minimum Necessary Transfer: We apply the principle of data minimisation to international transfers — only the data strictly required for a third party to perform its contracted function is shared across borders.
3. Security Standards: International recipients are required to maintain security standards at least equivalent to those described in Section 10, including encryption in transit and at rest.

By using the Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to international locations as described above, subject to the safeguards in place.

Amendments to This Policy

vio77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made to this Policy, we will notify registered Players by email to the address on file and by displaying a prominent notice on the Platform for a minimum of 14 days before the revised Policy takes effect.

The effective date and version number displayed in the page header of this document will be updated to reflect the current version. Continued use of the Platform after the revised Policy's effective date constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

Previous versions of this Privacy Policy are available upon request by contacting the Data Protection team at the address in Section 16.

Contact & Complaints

For all privacy-related enquiries — including data access requests, rectification requests, erasure requests, consent withdrawal, or formal complaints regarding our data practices — please contact the vio77 Data Protection team through the following channel:

When submitting a data rights request, please include your registered username and the email address associated with your account. For security purposes, we may require you to complete additional identity verification steps before actioning a request that involves access to or deletion of account data.