Privacy Policy — amon77

This Privacy Policy ("Policy") is issued by amon77 ("amon77", "we", "us", or "our") and governs the collection, processing, storage, and disclosure of personal data relating to all individuals ("you", "User", "Member") who access or use the amon77 online gaming platform available at amon77.pro (the "Platform"), including all associated sub-pages, mobile-optimised interfaces, and any customer support channels operated by amon77.

amon77 operates as an internationally licensed online gaming and sportsbook platform serving members primarily located across Indonesia — including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and Makassar — as well as members in other jurisdictions where access to the Platform is not prohibited by local law.

This Policy should be read in conjunction with amon77's Terms & Conditions and Responsible Gaming policy. By registering an account, depositing funds, placing a wager, or otherwise using any feature of the Platform, you acknowledge that you have read, understood, and consented to the data processing practices described in this Policy.

amon77 collects only the personal data that is necessary and proportionate to the purposes set out in this Policy. The categories of personal data we may collect include:

• Full legal name, as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• Gender (optional, collected where provided).
• Residential address, including city, province, and postal code.
• Nationality and country of residence.

• Email address used to register your account and receive account notifications.
• Mobile phone number registered in Indonesia or your country of residence.

• Copies of government-issued photo identification such as your Indonesian national identity card (KTP), passport, or driving licence.
• Proof-of-address documentation such as utility bills or bank statements.
• Proof that the payment method used is registered in your name (e.g., screenshots of your BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay account details).
• Source-of-funds documentation, where required by our AML compliance obligations.

• Bank account numbers, e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and other payment method details used to make deposits or receive withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers, denominated in Indonesian Rupiah (IDR / Rp).
• Bonus claim and wagering activity records.

• Betting history across all product verticals, including sportsbook (BRI Liga 1, EPL, La Liga, Champions League, and other markets), live casino, slots, and togel (Indonesia's traditional numbers lottery) markets.
• Session timestamps, wager amounts, win/loss records, and game-specific interaction logs.
• Responsible gaming tool usage, including deposit limit adjustments, cool-off periods, and self-exclusion requests.

• IP address and inferred geographic location at the time of each login and session.
• Browser type, version, and operating system.
• Device identifiers (where technically available), screen resolution, and time zone setting.
• Referring URL and on-Platform navigation path.

• Records of any communications you send to amon77 via live chat, email ([email protected]), or any other support channel.
• Survey responses, feedback submissions, and promotional opt-in/opt-out preferences.

amon77 collects personal data through the following channels and mechanisms:

amon77 processes personal data only where a lawful basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing that is required to perform the contract between you and amon77 — namely, the Terms & Conditions you accepted upon registration. This includes account creation and management, deposit and withdrawal processing, bet settlement, and customer support provision.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, counter-terrorism financing (CTF) obligations, and KYC identity verification requirements imposed on internationally licensed gaming operators.
• Legitimate Interests: Processing undertaken to pursue amon77's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection and prevention, platform security monitoring, responsible gaming compliance, and service improvement analytics.
• Consent: Where we rely on your consent as a legal basis — for example, for sending promotional emails, SMS notifications, or personalised bonus offers — you may withdraw that consent at any time by contacting [email protected] or updating your preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

amon77 uses the personal data we collect strictly for the following defined purposes:

• Account Management: Creating, maintaining, and administering your amon77 member account, including authentication and access control.
• KYC & Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in compliance with our AML and responsible gaming obligations.
• Payment Processing: Facilitating deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja, and maintaining accurate financial records of all transactions in IDR.
• Service Delivery: Providing access to all Platform features, including the sportsbook, live casino, slot library, and togel markets, and ensuring bet settlement and game outcomes are recorded accurately.
• Customer Support: Responding to your enquiries, resolving account issues, and managing complaints raised via live chat or email.
• Responsible Gaming: Monitoring your gaming activity to identify indicators of problem gambling behaviour and applying responsible gaming tools — including deposit limits, loss limits, cool-off periods, and self-exclusion — where appropriate or upon your request.
• Fraud & Security: Detecting and preventing unauthorized account access, duplicate account creation, bonus abuse, money laundering, and any other form of fraudulent or prohibited activity.
• Marketing Communications (Consent-Based): Sending you promotional offers, bonus notifications, and event-based communications (such as Idul Fitri promotions or BRI Liga 1 season offers) where you have opted in to receive such materials.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the functionality, performance, and content offering of the amon77 Platform.
• Legal Compliance: Retaining records and cooperating with regulatory or law enforcement enquiries as required by applicable international gaming regulations.

amon77 does not disclose your personal data to third parties except in the following defined circumstances:

We engage trusted third-party service providers to support the operation of the Platform. These providers are permitted to process your data only to the extent necessary to deliver their contracted services and are bound by confidentiality and data protection obligations:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Third-party identity verification services used to authenticate documents submitted during the KYC process.
• Game Studio APIs: Licensed game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, which receive session identifiers necessary to deliver their games.
• Hosting & Infrastructure Providers: Cloud infrastructure and content delivery network (CDN) providers that host the Platform and its associated data securely.
• Customer Support Platforms: Live chat and CRM software providers used to manage member support communications.

amon77 may disclose your personal data to relevant authorities, regulators, law enforcement agencies, or judicial bodies where we are legally compelled to do so — for example, in response to a valid court order, subpoena, or formal regulatory request relating to AML or CTF investigations.

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of amon77's assets, your personal data may be transferred to the relevant acquiring entity. In such circumstances, amon77 will notify affected members by email and update this Policy to reflect the new data controller's identity prior to any transfer taking effect.

amon77 may share your data with third parties not described above where you have given your explicit, informed consent for such sharing. You may withdraw that consent at any time by contacting [email protected].

amon77 uses cookies and similar tracking technologies to operate the Platform effectively, enhance your user experience, and analyse Platform performance. A cookie is a small text file stored on your device when you visit a website. amon77 uses the following categories of cookies:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or fraud detection cookies may prevent you from accessing certain features of the Platform. amon77 does not use third-party advertising or retargeting cookies.

amon77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and AML compliance obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your active membership, plus a minimum of five (5) years following account closure, in compliance with internationally recognized AML record-keeping standards.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the date of the last regulated transaction.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction.
• Customer Support Communications: Retained for a minimum of three (3) years following the closure of each support ticket or complaint.
• Marketing Consent Records: Retained for the duration of your membership and for one (1) year following any withdrawal of consent, to demonstrate compliance.
• Technical & Device Logs: Retained for a maximum of thirteen (13) months from the date of collection, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, amon77 will securely delete or permanently anonymise your personal data in accordance with industry-standard data destruction procedures.

amon77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your browser or device and the amon77 Platform is encrypted in transit using industry-standard TLS 1.2 or TLS 1.3 protocols.
• Data Encryption at Rest: Sensitive personal data — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within amon77's systems is restricted on a strict need-to-know basis. All staff with access to member data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): amon77 offers optional two-factor authentication for member accounts and mandates 2FA for all internal staff accessing production systems.
• Penetration Testing & Vulnerability Management: The Platform undergoes regular third-party penetration testing and automated vulnerability scanning to identify and remediate security weaknesses proactively.
• Incident Response: amon77 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to affected members, amon77 will notify those members without undue delay via the email address registered on their account.

As a data subject, you hold the following rights with respect to the personal data that amon77 holds about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. amon77 will respond within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the personal data amon77 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request that amon77 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations under AML regulations.
• Right to Restriction of Processing: You may request that amon77 restrict the processing of your data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, amon77 will cease all such communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

If amon77 becomes aware that personal data has been collected from an individual who is under the age of 21 — whether through misrepresentation during registration or any other means — we will immediately suspend the relevant account, delete all associated personal data, and reverse any transactions processed in connection with that account.

If you are a parent or guardian and you believe that a minor under your care has registered an account on amon77, please contact us immediately at [email protected] so that we can take prompt action.

The amon77 Platform integrates with third-party services — including payment processors, game content APIs, and identity verification platforms — to deliver its full feature set. Where your personal data is shared with these providers, we do so only to the minimum extent necessary and under contractual data protection obligations.

amon77 is not responsible for the privacy practices of third-party organisations whose services you may access independently outside the amon77 Platform — for example, your bank's own mobile application (BCA Mobile, BRI Mobile Banking), your e-wallet provider (OVO, GoPay, DANA), or any external website you navigate to independently. We encourage you to review the privacy policies of those services directly.

All game content providers integrated into the amon77 Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — are independently licensed by recognised international gaming regulators and are subject to their own data protection and security frameworks in addition to their contractual obligations to amon77.

As an internationally licensed platform, amon77 may transfer personal data to service providers and infrastructure partners located outside of Indonesia. Where such transfers occur, amon77 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable to amon77 as data controller.
• Transfers to jurisdictions that maintain recognised adequacy standards for the protection of personal data.
• Transfers to certified service providers operating under internationally recognised security frameworks.

By using the amon77 Platform, you acknowledge and consent to the transfer of your personal data to amon77's international service providers as described in this section, subject always to the safeguards outlined above.

amon77 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the services we offer. The date of the most recent revision will always be displayed at the top of this page.

Where we make material changes to this Policy — for example, changes that affect how we use your data or the rights available to you — we will notify active members via the email address registered to their account at least fourteen (14) days before the changes take effect. For non-material editorial or structural updates, the revised Policy will be published on this page without separate notification.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to any changes, you must cease using the Platform and request account closure by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how amon77 processes your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" or "Data Rights" in the subject line so your message is routed to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week via the in-account chat widget. Our support agents — including native Indonesian-speaking staff covering WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones — can assist with initial privacy enquiries and escalate formal data rights requests to the responsible team.
• Response Time: amon77 targets an initial response to all privacy-related email enquiries within 4 business hours (WIB) and aims to resolve formal data rights requests within 30 calendar days of identity verification.

If you are unsatisfied with amon77's response to a privacy complaint, you have the right to escalate your complaint to the data protection or gaming regulatory authority in the jurisdiction in which amon77 holds its operating licence.