kiu77 Privacy Policy

kiu77, operating the website accessible at https://kiu77.asia (the "Platform"), acts as the data controller in respect of personal data collected from users of the Platform ("Players", "you"). As data controller, kiu77 determines the purposes and means by which your personal data is processed and bears primary responsibility for ensuring that processing activities comply with applicable data protection principles.

References to "kiu77", "we", "us", or "our" throughout this Privacy Policy refer to the operator of the Platform. All formal data-related enquiries and requests must be directed to our support team using the contact details set out in Clause 14.

kiu77 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises the categories, specific data points, and the primary reason each is collected:

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health records) unless explicitly required by a regulatory obligation and with your express prior consent.

kiu77 collects personal data through the following channels:

• Direct Collection: Data you provide when creating an Account, completing KYC verification, initiating a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated Collection: Technical and behavioural data gathered automatically as you navigate the Platform, through server logs, session tracking, and first-party cookies (see Clause 7 for full details).
• Third-Party Sources: Identity and fraud-screening data obtained from KYC verification partners; payment-confirmation data received from Indonesian bank gateways and e-wallet providers; game-round data transmitted from licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft.
• Publicly Available Sources: In limited circumstances, kiu77 may cross-reference publicly available records (for example, sanctions lists or adverse-media databases) as part of its anti-money-laundering obligations.

kiu77 processes your personal data strictly for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account Management: Creating, maintaining, and securing your kiu77 Account; authenticating your identity at login; enforcing single-account rules.
• Service Delivery: Processing sports bets on BRI Liga 1, EPL, La Liga, Champions League, and other markets; facilitating casino and togel (Indonesia's traditional numbers lottery) gameplay; awarding and tracking promotional bonuses.
• Payment Processing: Executing IDR deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja; reconciling transaction records; issuing withdrawal confirmations.
• Identity Verification (KYC): Verifying age (21+ minimum), identity, and residential address before processing your first withdrawal or awarding certain promotions, as required by our international gaming licence obligations.
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring behavioural patterns that may indicate problem gambling; enforcing self-exclusion periods and deposit limits elected by Players; proactively contacting Players showing signs of harmful play.
• Legal Compliance: Meeting anti-money-laundering (AML), counter-terrorism-financing (CTF), and other applicable regulatory obligations under our international gaming licence.
• Customer Support: Responding to enquiries, resolving disputes, and improving the quality of our support services.
• Marketing Communications (opt-in only): Sending promotional emails, bonus offers, and event notifications to Players who have explicitly opted in. You may withdraw this consent at any time via your Account settings or by contacting support.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform features, fix bugs, and optimise the player experience for Indonesian users.

Every processing activity carried out by kiu77 rests on one or more of the following legal bases:

kiu77 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. Data may be shared in the following strictly limited circumstances:

• Payment Processors: Indonesian bank gateways (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to execute your deposit or withdrawal transaction.
• KYC & Identity Verification Partners: Third-party identity-verification services receive your identity documents and personal details solely for the purpose of conducting age and identity checks on behalf of kiu77.
• Licensed Game Studios: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a pseudonymous player identifier and bet-related data to deliver their games and calculate results. They do not receive your full identity or financial data.
• Fraud & Security Providers: Specialised fraud-detection and cybersecurity vendors process technical data (IP addresses, device fingerprints) to protect the Platform and its players from malicious actors.
• Legal Authorities: kiu77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal obligation, court order, or regulatory direction. kiu77 will notify you of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of kiu77's business or assets, your personal data may be transferred to a successor entity, subject to the same privacy protections described in this Policy.

All third-party processors engaged by kiu77 are contractually bound to process personal data only on kiu77's documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return data upon termination of the service relationship.

kiu77 uses cookies and similar tracking technologies (collectively, "Cookies") to operate the Platform, remember your preferences, and analyse usage patterns. The categories of Cookies we deploy are as follows:

You may manage Cookie preferences through your browser settings. Note that disabling strictly necessary Cookies will prevent you from logging in or using core Platform features. kiu77 does not use third-party advertising network Cookies or cross-site tracking technologies from social media platforms.

kiu77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our regulatory and legal obligations. The key retention periods are:

• Active Account Data: Retained for the full duration of your Account's active status plus a minimum of five (5) years following Account closure, to satisfy AML record-keeping requirements under our international gaming licence.
• KYC Documents: Retained for a minimum of five (5) years following Account closure. Copies of government-issued identity documents are deleted as soon as the minimum retention period expires and there is no outstanding legal hold.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the last communication, or longer where the communication relates to a pending dispute or legal proceeding.
• Analytics Data: Aggregated anonymised analytics data may be retained indefinitely as it cannot be used to identify individual players.
• Marketing Preferences: Retained until you withdraw consent, at which point opt-in records are archived (not deleted) for a period of two (2) years to evidence your prior consent should it be relevant to a later dispute.

kiu77 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and the kiu77 Platform is protected by industry-standard Transport Layer Security (TLS 1.2 or higher). Our SSL certificate is renewed regularly and the padlock indicator should always be visible in your browser's address bar.
• Encryption at Rest: Sensitive personal data — including identity documents, financial account details, and KYC records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within kiu77's infrastructure is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged and periodically audited.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their kiu77 Accounts. Internal staff accounts with access to player data are required to use 2FA without exception.
• Intrusion Detection: kiu77 operates continuous intrusion detection and anomaly-monitoring systems. Unusual access patterns trigger automated alerts and, where necessary, temporary Account locks pending investigation.
• Vulnerability Management: kiu77 conducts regular security assessments and penetration tests of the Platform. Critical vulnerabilities are remediated on an expedited basis.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, kiu77 will notify affected Players without undue delay and take immediate steps to contain and remediate the breach.

As a Player on the kiu77 Platform, you hold the following rights with respect to your personal data. kiu77 is committed to honouring these rights promptly and without undue complication:

To exercise any of the above rights, contact our Data Support team at [email protected] with the subject line "Data Rights Request". We will acknowledge receipt within 3 business days and provide a substantive response within 30 calendar days. Complex requests may take up to 60 days; we will inform you if an extension is necessary.

kiu77 operates on an internationally distributed infrastructure, and some of the third-party processors we engage — including game studios, KYC verification providers, and cloud infrastructure providers — may process your data in jurisdictions outside Indonesia. Where such transfers occur, kiu77 ensures appropriate safeguards are in place, including:

• Standard contractual clauses that impose data-protection obligations on the receiving processor equivalent to those applied within kiu77's own processing activities.
• Transfers only to processors that have demonstrated compliance with internationally recognised information-security standards (e.g., ISO 27001 or equivalent).
• Transfer impact assessments conducted prior to engaging any new international processor, with particular attention to the legal environment of the destination jurisdiction.

For Players in Indonesia, kiu77 notes that Indonesian personal data protection law (Undang-Undang Perlindungan Data Pribadi) places obligations on entities handling the personal data of Indonesian citizens. kiu77 takes these obligations seriously and applies equivalent or higher standards of protection regardless of where processing physically occurs.

The kiu77 Platform is strictly for adults aged 21 and above. kiu77 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the Account registration process, and additional documentary verification may be requested at any time.

If kiu77 discovers or is notified that personal data has been collected from a person under 21, the Account will be immediately suspended, all associated data will be deleted, and any balance will be returned to the originating payment method where possible. If you believe that a minor has created an Account on the Platform, please contact us immediately at [email protected].

kiu77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable law. When material changes are made, we will:

• Update the "Last Updated" date at the top of the Table of Contents sidebar.
• Send a notification to your registered email address summarising the key changes.
• Display a prominent notice on the Platform upon your next login, requiring acknowledgement before you can continue using the service.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the Platform and submit an Account closure request.

For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your personal data by kiu77, please reach out via the following channels. All privacy-related correspondence should reference "Privacy Policy Enquiry" in the subject line:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 within the Platform after logging in via the kiu77 Login page. Average response time is under 2 minutes. Support is available in both English and Indonesian (Bahasa Indonesia).
• Response Commitment: We acknowledge all data rights requests within 3 business days (WIB, UTC+7) and provide a full response within 30 calendar days.

kiu77 does not provide a public telephone number. All official communications originate from addresses ending in @kiu77.asia. Be vigilant of phishing attempts from lookalike domains purporting to represent kiu77.