Privacy Policy

1. Introduction

api77 ("we," "us," or "our") is committed to protecting the privacy and personal data of all users of our online betting platform, accessible at https://api77.cam. This Privacy Policy describes in detail how api77 collects, processes, stores, shares, and protects personal information you provide or that we gather when you access or use our services.

This policy applies to all users of the api77 platform, including visitors who browse without registering, registered members who use our sports betting, togel (Indonesia's traditional numbers lottery), casino, and slot services, and individuals who contact us for customer support. By using our platform or creating an account, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which form part of the agreement governing your use of api77. If you do not agree with any part of this policy, please cease using our platform immediately and contact us to request account closure.

2. Definitions

For clarity and consistency throughout this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a living individual, including name, email address, phone number, date of birth, KTP number (Indonesian National Identity Card), IP address, and financial information.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Controller" refers to api77 as the entity that determines the purposes and means of processing your personal data.
• "Data Subject" refers to you — the individual whose personal data is being processed.
• "Third Party" means any entity other than api77 and the data subject, including payment processors, identity verification providers, and analytics services.
• "Sensitive Data" refers to categories of personal data requiring heightened protection, including financial account information, government-issued identity documents (KTP), and account credentials.
• "Cookie" means a small text file placed on your device by our website to store preferences, session information, and analytics data.

3. Personal Data We Collect

3.1 Registration Data

When you create an account with api77, we collect the following information which you provide directly:

• Full legal name (as it appears on your KTP — Kartu Tanda Penduduk)
• Date of birth (to confirm you are at least 21 years of age, Indonesia's legal gambling age)
• Residential address within Indonesia (including city, province, and postal code)
• Email address
• Mobile phone number (Indonesian mobile number)
• Account username and encrypted password
• Preferred currency (Indonesian Rupiah / IDR)

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations under international anti-money laundering standards, we collect:

• A copy of your KTP (Kartu Tanda Penduduk — Indonesian National Identity Card), including your full name, NIK number, address, and photograph
• Proof of residential address dated within the last three months (utility bill, bank statement from BCA, BRI, BNI, Mandiri, or other Indonesian bank, or government-issued correspondence)
• Selfie photograph of you holding your KTP for identity confirmation
• Where required, source of funds documentation to comply with anti-money laundering regulations

3.3 Financial Data

To process deposits and withdrawals, we collect:

• Bank account details (bank name, account number, and account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon
• E-wallet account identifiers for OVO, DANA, GoPay, and ShopeePay
• Transaction history including deposit amounts, withdrawal requests, and timestamps
• Records of all bets placed, game results, and account balance changes

We do not store complete bank account passwords or online banking credentials. All financial data is handled through encrypted, tokenized systems.

3.4 Technical and Usage Data

When you visit or use our platform, we automatically collect certain technical information:

• IP address and approximate geographic location (city/region level)
• Device type, model, and operating system
• Browser type and version
• Pages visited, features used, and time spent on the platform
• Referring website URL (the page you came from before visiting api77)
• Session timestamps and login history
• Crash reports and error logs for platform stability

3.5 Customer Support Data

When you contact our customer support team via live chat, WhatsApp, or email ([email protected]), we collect records of your communications, the nature of your inquiry, and any information you voluntarily share during the support interaction. This enables us to resolve your issue effectively and maintain quality standards.

4. How We Collect Your Data

api77 collects personal data through the following means:

• Direct submission: Information you provide when registering, completing KYC verification, making deposits or withdrawals, placing bets, updating your profile, or contacting customer support.
• Automated collection: Technical and usage data collected automatically via server logs, analytics tools, and cookies when you access our website or app.
• Third-party verification: Identity verification services may cross-reference the documents you provide against external databases to confirm authenticity, consistent with our anti-money laundering obligations.
• Payment processors: Transaction confirmation data provided by Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) when processing deposits and withdrawals.

5. How We Use Your Personal Data

api77 uses the personal data we collect for the following purposes:

• Account creation and management: To establish, maintain, and administer your api77 account, including processing registrations, login authentication, and account settings.
• Service delivery: To enable you to place bets, play casino games, access togel and bandar bola (football betting) services, and use all platform features.
• Identity verification: To confirm you meet the eligibility requirements — specifically, that you are a resident of Indonesia and at least 21 years of age — through our KYC process.
• Payment processing: To process deposits and withdrawals in Indonesian Rupiah (IDR) through your nominated Indonesian bank account or e-wallet.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct.
• Regulatory compliance: To comply with our obligations under international anti-money laundering standards, responsible gaming requirements, and any applicable regulations.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance regarding your account, transactions, bonuses, and platform use.
• Responsible gaming: To monitor gaming patterns and proactively identify users who may exhibit signs of problem gambling, enabling intervention in accordance with our Responsible Gaming Policy.
• Platform improvement: To analyze usage trends, identify technical issues, and develop new features that improve the platform experience for Indonesian players.
• Marketing communications: With your consent, to send you promotional offers, bonus notifications, and updates about new games and features. You may withdraw consent at any time.
• Legal proceedings: To exercise or defend legal claims arising from your use of the platform or disputes with api77.

6. Legal Basis for Processing

api77 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and api77, including account creation, payment processing, and service delivery. Without this data, we cannot provide our services.
• Legal obligation: Processing required to comply with our legal and regulatory obligations, including KYC identity verification, anti-money laundering reporting, and age verification.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud detection, platform security, analytics, and customer support, where those interests are not overridden by your rights.
• Consent: Processing based on your voluntary, informed, specific consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

7. Sharing and Disclosure of Personal Data

api77 does not sell, rent, or otherwise transfer your personal data to third parties for their independent marketing or commercial purposes. We may share your data only in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers who assist us in operating the api77 platform. These include payment processors that facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, and e-wallets; identity verification providers for KYC processing; cloud hosting and infrastructure providers that store platform data; customer support software providers; and analytics services that help us understand platform usage. All service providers are contractually bound to handle your data only on our instructions and in accordance with this Privacy Policy.

7.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or government bodies in Indonesia or our licensing jurisdiction when required by law, court order, or lawful request — for example, in connection with anti-money laundering investigations or fraud inquiries. We will notify you of such disclosure where permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or corporate restructuring involving api77, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure the receiving entity is bound by equivalent data protection obligations.

7.4 Fraud Prevention Networks

To protect the integrity of the platform and all users, we may share information about fraudulent accounts or suspicious activity with other licensed online gaming operators and fraud prevention agencies for the purpose of preventing crime. This does not include sharing of general user data — only confirmed or strongly suspected fraud cases.

8. Data Retention

api77 retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following retention principles:

• Active accounts: Personal data is retained for the lifetime of your active account plus any applicable retention period required by law.
• Closed accounts: Following account closure, we retain transaction records, KYC documents, and account history for a minimum of five years to comply with anti-money laundering and financial record-keeping obligations.
• Customer support records: Communication logs are retained for up to three years to support dispute resolution and quality assurance.
• Marketing data: If you have consented to marketing communications, we retain your contact details for this purpose until you withdraw consent or request deletion, whichever comes first.
• Technical logs: Automated server logs and session data are retained for up to 12 months for security monitoring and platform stability purposes.

When retention periods expire, we securely delete or anonymize your personal data so that it can no longer be linked to your identity.

9. Data Security

api77 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers — the same standard used by major financial institutions worldwide.
• Encrypted data storage for sensitive data at rest, including KTP information, financial data, and account credentials.
• Access controls: Personal data is accessible only to api77 employees and contractors who require it to perform their job functions, governed by strict role-based access permissions.
• Two-factor authentication for administrative access to systems holding personal data.
• Regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident response procedures: In the event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities promptly in accordance with applicable requirements.

While api77 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

10. Your Data Rights

As a user of api77, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at [email protected] or via live chat.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how we use it. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You can update many details directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where we no longer have a legal basis to retain it. Note that certain data (such as transaction records) must be retained for legal compliance purposes and cannot be deleted on request.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while you contest its accuracy or while we assess an objection you have raised.
• Right to Data Portability: You may request a copy of personal data you have provided to us in a structured, machine-readable format, enabling you to transfer it to another service provider.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including profiling, where you believe your interests override ours. You have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw consent at any time. This does not affect the lawfulness of processing conducted before withdrawal.

We will respond to all data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days and will inform you of the extension and reason within the initial 30-day window.

11. Cookies and Tracking Technologies

api77 uses cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files stored on your device that help us recognize returning users, maintain your session, and analyze platform performance.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cannot be disabled without breaking core functionality.
• Performance and Analytics Cookies: Collect aggregated, anonymized data about how users interact with our platform — which pages are visited most, where users encounter errors, and how navigation flows work. This data helps us improve platform design and stability.
• Functional Cookies: Remember your preferences beyond the basic session — for example, your preferred deposit method, game view settings, or responsible gaming reminder intervals.
• Marketing Cookies: Used, with your consent, to measure the effectiveness of our promotional campaigns and to personalize bonus offers based on your platform activity. You may opt out of marketing cookies via your account settings.

11.2 Cookie Control

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being set. Please note that disabling strictly necessary cookies will impair or prevent access to the api77 platform. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

12. Minors and Age Protection

The api77 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory part of our KYC process, and accounts belonging to persons under 21 will be immediately closed with any deposits refunded.

If you are a parent or guardian and believe that a minor has created an account with api77, please contact us immediately at [email protected]. We will investigate and close the account promptly, ensuring no personal data of the minor is retained beyond what is required for regulatory compliance.

13. Changes to This Privacy Policy

api77 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered users by email or via a prominent notice on the platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this policy reflects the most recent revision. We encourage you to review this policy periodically. Your continued use of the api77 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should close your account before the effective date.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by api77, please contact our dedicated privacy support team through the following channels:

• Email: [email protected] — Response time: 6-12 hours
• Live Chat: Available 24/7 on our website — Average response time: 2-5 minutes during peak hours (WIB)
• WhatsApp: Indonesian mobile number available on the platform — Available 09:00–23:00 WIB daily

Our Indonesian-speaking support team is fully trained on data privacy matters and can assist with access requests, correction requests, deletion requests, marketing opt-outs, and any other data-related inquiry. All privacy-related communications are handled with strict confidentiality.

Acknowledgment: By using the api77 platform and creating an account, you confirm that you have read, understood, and agree to this Privacy Policy. You consent to the collection and processing of your personal data as described herein and confirm that you are a resident of Indonesia aged 21 years or older. If you have any questions before proceeding, please contact us at [email protected] before registering.