Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can identify a natural person, directly or indirectly — including name, national identity number, email address, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means kas77, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of kas77 under a written data-processing agreement.
• "Member" or "you" refers to any natural person who has registered a kas77 Account or otherwise interacts with the Platform.
• "Platform" refers to the kas77 website, mobile interface, software, and all associated services accessible at kas77.asia.
• "KYC" (Know Your Customer) means the identity-verification process through which kas77 confirms a Member's identity and eligibility before processing withdrawals.
• "Cookies" means small text files placed on your device by the Platform to store preferences, session data, and analytics information.

kas77 collects the minimum Personal Data necessary to provide our services securely and in compliance with applicable anti-money laundering (AML) regulations. The categories of data we collect are set out below.

kas77 uses your Personal Data for the following purposes:

• Account Management: To create, maintain, and administer your kas77 Account, including processing deposits and withdrawals in Indonesian Rupiah (IDR).
• Identity Verification (KYC): To verify your identity and age (21+) before activating withdrawal functionality, as required by our AML and responsible gaming obligations.
• Transaction Processing: To process deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay).
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor betting patterns and intervene where usage data suggests a Member may be at risk of gambling-related harm, in accordance with our Responsible Gaming commitments.
• Customer Support: To respond to your enquiries, resolve disputes, and provide our 24/7 Indonesian-speaking support service.
• Legal Compliance: To meet our obligations under applicable AML, counter-terrorism financing, and data protection regulations.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, stability, and features of the kas77 Platform.
• Personalisation: To tailor the Platform experience, including displaying promotions and game recommendations relevant to your activity history — where you have not opted out of such personalisation.

kas77 does not use your Personal Data for automated profiling that produces legal or similarly significant effects without human oversight.

kas77 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and kas77 — specifically, to operate your Account, process your transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary for kas77 to comply with its legal obligations, including AML regulations, KYC requirements, and applicable data retention laws.
• Legitimate Interests: Processing is necessary for the legitimate interests of kas77 — including fraud prevention, security monitoring, responsible gaming oversight, and Platform improvement — provided those interests are not overridden by your rights and interests.
• Consent: Where kas77 relies on your consent (for example, for optional marketing communications or optional personalisation features), you have the right to withdraw that consent at any time by contacting support or adjusting your Account settings. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

kas77 does not sell, rent, or trade your Personal Data. We share your data only in the following limited circumstances:

• Payment Processors: Your financial data is shared with the relevant Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit and withdrawal transactions.
• Identity Verification Partners: KYC document data may be shared with licensed third-party identity-verification service providers acting as Data Processors under a written agreement with kas77.
• Game Studio Providers: Technical data (such as session tokens and anonymised player identifiers) may be shared with our game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to deliver their game content. These providers do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: kas77 will disclose Personal Data to competent authorities where required by law, court order, or in the prevention and detection of criminal activity including money laundering.
• Fraud Prevention Networks: Anonymised or pseudonymised risk signals may be shared with fraud-prevention consortiums to protect the integrity of the Platform and the broader online gaming ecosystem.
• Business Transfers: In the event of a merger, acquisition, or sale of the kas77 business, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify active Members of any such transfer.

The kas77 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. The categories of cookies we use are described below.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair the functionality of the Platform and may prevent you from accessing your Account or completing transactions. kas77 does not use third-party advertising cookies or cross-site tracking pixels.

kas77 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention schedules are as follows:

• Account and Identity Data: Retained for the duration of your Account plus a minimum of 5 years following Account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable financial regulations.
• KYC Documents: Retained for 5 years following Account closure or the completion of the transaction to which they relate, whichever is later.
• Support Communications: Retained for up to 3 years for dispute resolution and quality assurance purposes.
• Technical and Usage Data: Retained in anonymised or aggregated form for up to 24 months; identifiable logs retained for up to 6 months.
• Self-Exclusion Records: Retained permanently to prevent re-registration during the exclusion period and to maintain a record of the exclusion for safeguarding purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Where anonymisation is not technically feasible, data is archived with restricted access controls.

kas77 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the kas77 Platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this encryption is active during your session.
• Encrypted Data Storage: Personal Data and financial records stored on kas77 servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised kas77 personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all staff with data access privileges.
• Intrusion Detection: The Platform is monitored 24/7 by automated intrusion detection and prevention systems. Anomalous activity triggers immediate security alerts and investigation.
• Regular Security Audits: kas77 conducts periodic penetration testing and vulnerability assessments carried out by independent security specialists to identify and remediate potential weaknesses.
• Incident Response: In the event of a data breach that poses a risk to your rights and interests, kas77 will notify affected Members without undue delay and will take immediate steps to contain and remediate the breach.

As a kas77 Member, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact our support team via live chat on the Platform or by email at [email protected]. We will respond to all valid requests within 30 days.

The kas77 Platform is strictly for adults aged 21 years and over. kas77 does not knowingly collect Personal Data from any person under the age of 21. By registering an Account, you represent and warrant that you are at least 21 years of age.

If kas77 becomes aware that Personal Data has been collected from a person under 21, that Account will be immediately suspended, all associated transactions voided, and the data deleted as quickly as technically practicable. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

kas77 operates as an internationally licensed platform. In the course of delivering our services, your Personal Data may be transferred to and processed in countries other than Indonesia — for example, in the jurisdiction where kas77's servers are hosted or where our game studio partners (such as Pragmatic Play and Evolution Gaming) operate their systems.

Whenever Personal Data is transferred outside Indonesia, kas77 ensures that an adequate level of protection is in place through one or more of the following safeguards:

• Transfer to a jurisdiction that provides an adequate level of personal data protection as recognised by applicable standards.
• Implementation of contractual data-protection clauses in agreements with Data Processors located in third countries.
• Application of binding technical safeguards including end-to-end encryption for data in transit and AES-256 encryption for data at rest.

By using the Platform, you acknowledge that your Personal Data may be processed internationally as described above, subject always to the protections set out in this Privacy Policy.

kas77 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or Platform features. Where a material change is made, we will notify active Members by posting the updated Policy on the Platform with a revised effective date. The updated Policy will take effect immediately upon publication.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after publication of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, please cease using the Platform and contact support to request Account closure.

The current version of this Privacy Policy is always accessible at kas77.asia/privacy-policy. The effective date at the top of this document indicates when it was last updated.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kas77 handles your Personal Data, please contact our dedicated Data Support team. We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 calendar days.

• Live Chat: Available directly on the kas77 Platform after login — the fastest channel for urgent privacy or security concerns.
• Email: [email protected] — please include your Account username and a clear description of your request. Email addresses are displayed as plain text and are not clickable links.

For formal complaints regarding our data-processing practices that we have been unable to resolve to your satisfaction, you may escalate your complaint to the relevant data protection authority in your jurisdiction. kas77 will cooperate fully with any such investigation.