Privacy Policy

1. Introduction

This Privacy Policy applies to all users of the kota77 platform, accessible at https://kota77.cam and related domains. By accessing or using our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. This policy should be read in conjunction with our Terms & Conditions, which govern your use of the kota77 platform.

kota77 operates as an online betting platform serving Indonesian residents who are at least 21 years of age. We recognize that privacy is a fundamental right, particularly in the context of financial transactions and gaming activities. Our commitment to data protection reflects international best practices while acknowledging the specific regulatory context of the Indonesian market.

2. Data Controller

The data controller responsible for your personal information is kota77, operating at https://kota77.cam. For any privacy-related inquiries, you may contact our Data Protection Officer through the contact methods provided at the end of this policy.

3. Information We Collect

3.1 Information You Provide Directly

When you register for a kota77 account, we collect personal information necessary to verify your identity, comply with legal requirements, and provide our services. This information includes:

• Identity Information: Full legal name as it appears on your Indonesian national identity card (KTP), date of birth, place of birth, and KTP number
• Contact Information: Email address, mobile phone number, and residential address in Indonesia
• Financial Information: Bank account details for deposits and withdrawals, including bank name (BCA, BRI, BNI, Mandiri, or others), account number, and account holder name; e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja
• Verification Documents: Copies of government-issued identification documents (KTP), proof of address documents, and photographs for facial verification purposes
• Transaction History: Records of all deposits, withdrawals, bets placed, game results, bonuses claimed, and account balance changes

3.2 Information Collected Automatically

When you access the kota77 platform, we automatically collect certain technical information to improve our services, detect fraud, and ensure platform security:

• Device Information: Type of device (mobile phone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers
• Usage Information: Pages visited, features used, time spent on each page, click patterns, search queries within the platform, game preferences, and betting patterns
• Location Information: IP address, which may reveal your approximate geographic location within Indonesia, and GPS coordinates if you grant permission on mobile devices
• Communication Records: Transcripts of live chat conversations with customer support, email correspondence, and records of phone calls for quality assurance purposes (with your consent where required)

3.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) may provide transaction confirmation, account verification status, and fraud alerts
• Identity Verification Services: Third-party services that verify the authenticity of KTP documents and match facial photographs to official records
• Marketing Partners: With your consent, we may receive information about your interactions with our marketing campaigns conducted through social media platforms or affiliate websites

4. How We Use Your Information

kota77 uses your personal information for the following legitimate purposes:

4.1 Account Management and Service Provision

• Creating and maintaining your kota77 account
• Verifying your identity and age (21+ requirement) to comply with Indonesian legal standards
• Processing deposits through BCA, BRI, BNI, Mandiri, and e-wallet channels
• Processing withdrawal requests to your verified bank accounts
• Managing bonuses, promotions, and loyalty program benefits
• Maintaining accurate transaction records and account histories
• Providing customer support through live chat, email, and other channels

4.2 Security and Fraud Prevention

• Detecting and preventing fraudulent account creation, identity theft, and unauthorized access
• Monitoring betting patterns to identify potential match-fixing, collusion, or bonus abuse
• Verifying the source of funds to comply with anti-money laundering regulations
• Protecting against cyber attacks, data breaches, and other security threats
• Enforcing our Terms & Conditions and identifying violations

4.3 Legal and Regulatory Compliance

• Maintaining records required by applicable gambling regulations and financial crime prevention laws
• Responding to lawful requests from Indonesian government authorities, courts, or law enforcement agencies
• Conducting internal audits and compliance reviews
• Reporting suspicious transactions as required by anti-money laundering regulations

4.4 Platform Improvement and Analytics

• Analyzing user behavior to improve platform design, navigation, and functionality
• Identifying popular games, betting markets, and features to optimize our offerings
• Testing new features and conducting A/B testing to enhance user experience
• Generating aggregated, anonymized statistics about platform usage (no personally identifiable information)

4.5 Marketing and Communication

With your consent, we may use your information to:

• Send promotional emails about new games, bonuses, and special offers relevant to Indonesian players
• Deliver personalized recommendations based on your game preferences and betting history
• Notify you about important account updates, security alerts, and policy changes
• Conduct customer satisfaction surveys to improve our services

You may opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in our emails. Please note that even if you opt out of marketing emails, we will still send transactional emails related to your account activity, withdrawals, and important security notifications.

5. Legal Basis for Processing

Under applicable data protection principles, kota77 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing your information is necessary to fulfill our contractual obligations under the Terms & Conditions, including account creation, transaction processing, and service delivery
• Legal Obligation: We must process certain information to comply with Indonesian laws regarding age verification, anti-money laundering, identity verification, and responsible gaming requirements
• Legitimate Interests: We have legitimate business interests in preventing fraud, ensuring platform security, improving our services, and operating a sustainable betting platform, provided these interests do not override your fundamental privacy rights
• Consent: For certain processing activities, particularly marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time

6. Data Sharing and Disclosure

6.1 Third-Party Service Providers

kota77 shares your personal information with trusted third-party service providers who assist us in operating the platform. These providers are contractually obligated to protect your data and use it only for the specific purposes we authorize:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja) process your deposit and withdrawal transactions
• Identity Verification Services: Third-party vendors verify the authenticity of your KTP documents and conduct anti-fraud checks
• Cloud Hosting Providers: Secure data centers store and process your information with encryption and access controls
• Customer Support Tools: Live chat software and email platforms enable our Indonesian-speaking support team to assist you
• Analytics Services: Platform analytics tools help us understand user behavior in aggregate form (anonymized data)

6.2 Legal Disclosures

We may disclose your personal information when required by law or when we believe in good faith that such disclosure is necessary to:

• Comply with lawful requests from Indonesian government authorities, regulatory bodies, or law enforcement agencies
• Respond to valid court orders, subpoenas, or legal processes
• Protect the rights, property, or safety of kota77, our users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Enforce our Terms & Conditions and investigate potential violations

6.3 Business Transfers

In the event that kota77 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on our platform before your information becomes subject to a different privacy policy.

6.4 No Sale of Personal Information

kota77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your trust is paramount, and we will never monetize your data in ways that compromise your privacy.

7. Data Security

kota77 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Safeguards

• Encryption: All data transmission between your device and our servers uses TLS/SSL encryption, the same technology employed by Indonesian banks for online banking
• Secure Storage: Personal information is stored in encrypted databases with access restricted to authorized personnel only
• Two-Factor Authentication: Optional 2FA provides an additional security layer for account access
• Firewall Protection: Advanced firewalls and intrusion detection systems monitor and block suspicious network activity
• Regular Security Audits: Independent third-party security firms conduct periodic penetration testing and vulnerability assessments

7.2 Organizational Safeguards

• Access Controls: Employee access to personal information is restricted based on job role and necessity (principle of least privilege)
• Staff Training: All employees receive regular training on data protection, privacy principles, and security best practices
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of user information
• Incident Response Plan: We maintain documented procedures to respond quickly and effectively to data breaches or security incidents

Despite our robust security measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You can help protect your account by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with others.

8. Data Retention

kota77 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law:

Data Type	Retention Period	Reason
Account Information	Duration of account + 7 years	Legal compliance and dispute resolution
Transaction Records	7 years from transaction date	Financial regulations and audit requirements
KYC Documents	7 years after account closure	Anti-money laundering regulations
Marketing Consent	Until consent is withdrawn	Ongoing consent requirement
Chat Logs	3 years	Customer service quality and dispute resolution
Device/Usage Data	2 years	Security monitoring and platform improvement

When personal information is no longer required, we securely delete or anonymize it so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and platform improvement purposes.

9. Your Privacy Rights

As a kota77 user, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can view much of this information directly through your account dashboard. For additional details, contact our support team.

9.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance with changes that require verification.

9.3 Right to Erasure

You may request deletion of your personal information, subject to certain exceptions. We must retain information required for legal compliance, dispute resolution, or fraud prevention. To request account closure and data deletion, contact our Data Protection Officer.

9.4 Right to Restrict Processing

In certain circumstances, you have the right to request that we limit how we use your personal information, for example, if you contest the accuracy of the data or object to our processing.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit this data to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal information based on legitimate interests. You also have the right to opt out of direct marketing communications at any time through your account settings.

9.7 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to your request within 30 days. Please note that we may need to verify your identity before processing certain requests to ensure we are protecting your information appropriately.

10. Cookies and Tracking Technologies

kota77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and improve platform functionality.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for platform operation, including maintaining your login session and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language selection, preferred payment methods, and game filters.
• Analytics Cookies: Help us understand how users interact with the platform, which pages are most popular, and where improvements are needed (aggregated data only).
• Marketing Cookies: Track your interactions with our promotional content and help us deliver relevant offers (requires your consent).

You can manage cookie preferences through your browser settings. However, disabling essential cookies may affect platform functionality and prevent you from accessing certain features.

11. Third-Party Links

The kota77 platform may contain links to game providers, payment processors, or informational resources operated by third parties. This Privacy Policy does not apply to those external websites. We encourage you to review the privacy policies of any third-party sites you visit, as we are not responsible for their data practices.

12. Children's Privacy

kota77 services are strictly intended for individuals who are at least 21 years of age, in accordance with Indonesian legal requirements for online gambling. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected information from someone under the minimum age, we will delete that information immediately. If you believe a person under 21 has provided us with personal information, please contact us immediately.

13. International Data Transfers

While kota77 primarily serves Indonesian residents, some of our service providers (such as cloud hosting providers and technical support vendors) may be located outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

14. Changes to This Privacy Policy

kota77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date and, where appropriate, by sending an email notification to the address associated with your account. Your continued use of kota77 services after such notification constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

For privacy concerns specific to Indonesian data protection regulations, we will work diligently to address your inquiries in accordance with local legal requirements and international best practices.