Privacy Policy — kawi77

kawi77 ("we", "us", "our") operates an online betting platform serving the Indonesian market. We recognize that the personal data you provide is entrusted to us and we take that responsibility seriously. This Privacy Policy sets out in detail the types of personal information we collect, the purposes for which we use it, the security measures we apply, and your rights regarding your personal data.

This policy should be read in conjunction with our Terms & Conditions, which govern your use of the kawi77 Platform. Where these documents use the term "personal data" or "personal information," we mean any information that identifies you as an individual or relates to an identifiable individual.

For the purposes of applicable data protection laws, kawi77 acts as the data controller with respect to the personal data processed through the Platform. This means we determine the purposes and means of processing your personal information.

If you have any questions about how we handle your personal data, or if you wish to exercise any of your data protection rights, please contact our Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy.

kawi77 collects personal data in the following categories:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address, and chosen account password.
• Identity Verification (KYC) Data: Government-issued photo ID (Indonesian national identity card — KTP, or passport), proof of address documents, and payment method ownership verification documents (e.g., bank statement screenshots).
• Payment and Transaction Data: Bank account details, e-wallet account identifiers (OVO, DANA, GoPay), deposit and withdrawal amounts, transaction timestamps, and payment method types.
• Communication Data: Contents of emails, live chat transcripts, WhatsApp messages, and any other correspondence between you and kawi77 customer support.
• Responsible Gaming Data: Deposit limits, loss limits, session time restrictions, self-exclusion requests, and self-assessment questionnaire responses.

3.2 Information Collected Automatically

• Device and Usage Data: IP address, device type, operating system, browser type and version, referring URL, pages visited, time spent on pages, clickstream data, and access timestamps.
• Betting Activity Data: Bet amounts, bet types (single, mix parlay / accumulator, live in-play), odds selected, sports or games played, win/loss records, and account balance history.
• Cookies and Tracking Technologies: Information collected via cookies, web beacons, and similar technologies (see Section 10 for details).

3.3 Information from Third Parties

• Payment Processors: Confirmation of deposit and withdrawal transactions from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment providers.
• Identity Verification Services: Age verification and identity authentication data from third-party KYC service providers engaged by kawi77.
• Sports Data Providers: Match results, odds feeds, and live score updates from licensed sports data suppliers.

kawi77 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your kawi77 member account.
• Identity Verification and KYC Compliance: To verify your age (minimum 21 years), confirm your identity, and meet anti-money-laundering (AML) and Know Your Customer (KYC) regulatory obligations.
• Payment Processing: To process deposits, execute withdrawals, maintain transaction records, and comply with financial regulations.
• Service Delivery: To provide access to sports betting, live casino, togel, slots, and all other gaming products offered on the kawi77 Platform.
• Customer Support: To respond to inquiries, resolve disputes, provide technical assistance, and handle complaints.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, collusion, bonus abuse, and unauthorized account access.
• Responsible Gaming: To implement deposit limits, session timers, self-exclusion requests, and other player-protection measures.
• Legal and Regulatory Compliance: To comply with applicable gaming regulations, tax reporting obligations, court orders, and requests from law enforcement or regulatory authorities.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, optimize user experience, and develop new features.

kawi77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) and to provide the betting services you have requested.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including KYC, AML, age verification, tax reporting, and licensing requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, customer support, and service improvement, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where we send marketing communications or use non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

kawi77 does not sell, rent, or lease your personal data to third parties for their own marketing purposes. We do, however, share personal data with the following categories of third parties where necessary to operate the Platform and comply with legal obligations:

6.1 Service Providers

We share personal data with trusted third-party service providers who perform services on our behalf, including:

• Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other Indonesian payment gateways)
• KYC and identity verification service providers
• Customer support platform providers (live chat, email ticketing systems)
• Cloud hosting and data storage providers
• Sports data and odds feed suppliers
• Marketing automation and email service providers (only where you have opted in to receive marketing)

All third-party service providers are contractually bound to process personal data only on our instructions, to implement appropriate security measures, and to use data solely for the purposes specified by kawi77.

6.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulators, courts, or other governmental authorities where required by law, court order, or regulatory request, or where necessary to protect the rights, property, or safety of kawi77, our members, or others.

6.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, or sale of assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.

kawi77 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and kawi77 servers is encrypted using industry-standard SSL/TLS protocols.
• Secure Data Storage: Personal data is stored on secure, geo-redundant servers located in ISO 27001-certified data centers with physical access controls and 24/7 monitoring.
• Access Controls: Access to personal data is restricted to authorized kawi77 personnel on a strict need-to-know basis, with role-based permissions and multi-factor authentication.
• Regular Security Audits: kawi77 conducts routine vulnerability assessments, penetration testing, and security audits to identify and remediate potential threats.
• Password Security: Account passwords are stored using industry-standard hashing algorithms. kawi77 never stores passwords in plaintext and cannot retrieve your original password.
• Incident Response Plan: In the event of a data breach affecting your personal data, kawi77 will notify you and relevant authorities within 72 hours, in accordance with applicable data protection laws.

While we implement robust security measures, no system is entirely impervious to attack. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately if you suspect unauthorized access to your account.

kawi77 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations. Specific retention periods are as follows:

• Active Account Data: Retained for the duration of your account's active status and for a period of 7 years following account closure to meet anti-money-laundering and gaming regulatory requirements.
• Transaction Records: Retained for 7 years from the date of the transaction to comply with financial record-keeping obligations.
• KYC Documents: Retained for 7 years following account closure or the date of the last verification, whichever is later.
• Customer Support Communications: Retained for 3 years from the date of the last interaction to maintain service quality and resolve disputes.
• Marketing Consent Records: Retained for the duration of your consent and for 2 years following withdrawal of consent to demonstrate compliance with consent requirements.
• Self-Exclusion Records: Retained indefinitely to honor self-exclusion commitments and prevent re-registration during exclusion periods.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer identify you.

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of your request, in a structured, machine-readable format.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. You can also update most account information directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will comply unless retention is required to meet legal or regulatory obligations (e.g., AML record-keeping requirements).
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of disputed data.
• Right to Data Portability: You may request that we transfer your personal data to another service provider in a commonly used, machine-readable format where technically feasible.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interests as the legal basis. You may also object to marketing communications at any time by clicking "unsubscribe" in any promotional email.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14.

kawi77 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver targeted content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These cookies enable core features such as account login, session management, and secure payment processing. They cannot be disabled.
• Performance Cookies: Collect anonymous data about how visitors use the Platform, including which pages are visited most often and any error messages encountered. This helps us improve site performance.
• Functional Cookies: Remember your preferences (e.g., language settings, favorite sports markets) to provide a more personalized experience.
• Advertising Cookies: Track your activity across websites to deliver targeted advertisements. These cookies require your consent and can be disabled through your browser or account settings.

10.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies entirely or delete existing cookies. Please note that disabling essential cookies may impair the functionality of the kawi77 Platform.

kawi77 operates internationally, and some of our service providers and data storage infrastructure may be located outside Indonesia. When we transfer personal data to countries that do not provide an equivalent level of data protection, we implement appropriate safeguards to protect your data, including:

• Standard contractual clauses approved by relevant data protection authorities
• Ensuring that service providers maintain ISO 27001 or equivalent security certifications
• Limiting transfers to jurisdictions recognized as providing adequate data protection

By using the kawi77 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia under these protective measures.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that information and permanently close the associated account. If you believe that a person under 21 has registered an account on kawi77, please contact us immediately at the address provided in Section 14.

We verify the age of all members through mandatory KYC checks before processing the first withdrawal. Accounts that fail age verification are closed permanently, and all balances are returned to the originating payment method where legally permissible.

kawi77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or service offerings. When we make material changes, we will notify active members via the email address registered to their account at least 14 days before the changes take effect, except where changes are required immediately to comply with legal obligations.

The version number and last-updated date displayed at the top of this page indicate the current version in effect. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

Continued use of the kawi77 Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you may close your account by contacting customer support.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or need to contact our Data Protection Officer, please use the following channels:

When submitting a data request, please include your full name, registered email address, and account username (if applicable) to help us locate your records. We may request additional identity verification to protect against fraudulent requests.