Last Updated: January 1, 2026
Effective Date: January 1, 2026

1. Introduction

Welcome to the xyz77 Privacy Policy. This document explains how xyz77 ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our online gaming platform at xyz77.cam (the "Website") and related services (collectively, the "Services").

xyz77 is an online gaming platform serving Indonesian players aged 21 and older. We are committed to maintaining the highest standards of data privacy and security. This Privacy Policy applies to all users who register for an account, visit our Website, or interact with our Services in any capacity.

By creating an account with xyz77, accessing our Website, or using our Services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately discontinue use of our Services.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of xyz77 Services. Together, these documents form the complete agreement between you and xyz77 regarding data privacy and platform usage.

2. Information We Collect

xyz77 collects various types of personal information to provide, maintain, and improve our Services. The information we collect falls into several categories:

2.1 Information You Provide Directly

When you register for an xyz77 account, we collect the following information that you provide voluntarily:

  • Personal Identification Information: Full legal name (as it appears on your Indonesian ID card or KTP), date of birth, gender, nationality, and residential address in Indonesia.
  • Contact Information: Email address, mobile phone number registered in Indonesia, and preferred communication language.
  • Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
  • Identity Verification Documents: Copies of government-issued identification such as Indonesian ID card (KTP), passport, or driver's license, as well as selfie photographs holding identification documents for Know Your Customer (KYC) compliance.
  • Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata; e-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja; and transaction history including deposits and withdrawals.
  • Communication Data: Records of your interactions with our customer support team via live chat, email, WhatsApp, or Telegram, including the content of your messages and attached files.

2.2 Information Collected Automatically

When you access xyz77 Services, we automatically collect certain technical and usage information:

  • Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and device identifiers.
  • Connection Information: IP address, internet service provider (ISP), geographic location (city and region within Indonesia derived from IP address), and timezone (typically Western Indonesia Time/WIB).
  • Usage Data: Pages visited on xyz77.cam, time spent on each page, games played, bets placed, click patterns, navigation paths, search queries entered on our Website, and referring/exit pages.
  • Gaming Activity: Game selections, betting patterns, win/loss records, bonus utilization, tournament participation, and VIP tier progression.
  • Performance Data: Website load times, error messages encountered, and technical issues reported.

2.3 Information from Third Parties

xyz77 may receive information about you from third-party sources, including:

  • Payment Processors: Transaction confirmation, payment method verification, and fraud detection signals from Indonesian banks and e-wallet providers.
  • Identity Verification Services: Additional identity validation data from third-party KYC service providers to prevent fraud and comply with anti-money laundering (AML) regulations.
  • Game Providers: Game session data, RTP (Return to Player) statistics, and gaming performance metrics from providers like Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt.
  • Affiliate Partners: Referral source information if you accessed xyz77 through an affiliate marketing channel.

3. How We Use Your Information

xyz77 uses the personal information we collect for the following purposes, all of which are necessary to provide our Services and comply with legal obligations:

3.1 Account Management and Service Delivery

  • Creating and maintaining your xyz77 user account
  • Verifying your identity and age to comply with Indonesian regulations requiring users to be 21 years or older
  • Processing deposits and withdrawals to your Indonesian bank accounts (BCA, BRI, BNI, Mandiri) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
  • Providing access to casino games, live dealer tables, sports betting markets (including bandar bola football betting and mix parlay accumulator bets), and other gaming products
  • Tracking your gameplay, bets, wins, and losses for account statement purposes
  • Managing your VIP tier status and delivering associated benefits

3.2 Fraud Prevention and Security

  • Detecting and preventing fraudulent activity, money laundering, bonus abuse, and account sharing
  • Verifying that you are not using multiple accounts or circumventing platform restrictions
  • Monitoring for underage gambling attempts and preventing access by individuals under 21 years of age
  • Investigating suspicious transactions and unusual betting patterns
  • Protecting xyz77 systems from cyber attacks, hacking attempts, and unauthorized access
  • Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations

3.3 Customer Support and Communication

  • Responding to your inquiries via live chat, email, WhatsApp, or Telegram in Indonesian or English
  • Providing technical assistance and resolving account issues
  • Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts
  • Notifying you of changes to our Terms & Conditions, Privacy Policy, or game rules
  • Conducting customer satisfaction surveys to improve our Services

3.4 Marketing and Promotions

  • Sending promotional offers, bonus notifications, and special event announcements (you may opt out of marketing communications at any time)
  • Personalizing bonus offers based on your gaming preferences and VIP tier
  • Informing you about new game releases from providers like Pragmatic Play, Evolution Gaming, and PG Soft
  • Announcing tournaments, jackpot promotions, and seasonal campaigns (e.g., Indonesian Independence Day bonuses, Idul Fitri specials)
  • Displaying relevant advertisements on xyz77.cam based on your browsing behavior

3.5 Platform Improvement and Analytics

  • Analyzing user behavior to optimize Website layout, navigation, and user experience
  • Identifying popular games and betting markets among Indonesian players
  • Testing new features and game integrations before full release
  • Improving mobile responsiveness for Android and iOS devices
  • Generating aggregated, anonymized statistics for business intelligence (e.g., average session duration, most played slots, peak betting hours in WIB timezone)

3.6 Legal and Regulatory Compliance

  • Complying with Indonesian laws and regulations governing online gaming, data protection, and financial transactions
  • Responding to lawful requests from government authorities, law enforcement agencies, or courts
  • Enforcing our Terms & Conditions and protecting xyz77's legal rights
  • Maintaining records required by our licensing jurisdiction and financial regulations
  • Cooperating with responsible gaming initiatives and self-exclusion programs

4. Data Sharing and Disclosure

xyz77 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who perform services on our behalf, including:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Play'n GO, and other software providers who deliver casino games, live dealer experiences, and sports betting platforms.
  • KYC and Identity Verification Services: Third-party providers who verify your Indonesian ID card (KTP), passport, or other identification documents to ensure age compliance and prevent fraud.
  • Cloud Hosting and Data Storage: Secure server providers who host xyz77's infrastructure and databases.
  • Customer Support Tools: Live chat software, email service providers, and ticketing systems used to deliver 24/7 Indonesian-speaking support.
  • Marketing and Analytics Platforms: Services that help us analyze Website traffic, user behavior, and campaign effectiveness (using anonymized or aggregated data whenever possible).

All third-party service providers are contractually obligated to protect your data and use it only for the specific purposes we authorize. They are prohibited from selling or sharing your information with other parties.

4.2 Legal and Regulatory Authorities

xyz77 may disclose your personal information to government agencies, law enforcement, regulators, or courts when required by law or in response to valid legal processes, including:

  • Complying with subpoenas, court orders, or other legal obligations under Indonesian law
  • Cooperating with anti-money laundering (AML) investigations or counter-terrorism financing (CTF) inquiries
  • Responding to requests from tax authorities regarding financial transactions
  • Assisting in criminal investigations related to fraud, identity theft, or other illegal activities
  • Protecting the safety, rights, or property of xyz77, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceeding involving xyz77, your personal information may be transferred to the successor entity or acquiring company. We will notify you via email and/or prominent notice on our Website before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other parties when you provide explicit consent. For example, if you participate in a promotional campaign co-sponsored with a partner brand, we may share limited information necessary to deliver the promotion (e.g., your username and contact details for prize fulfillment). You can withdraw consent at any time by contacting our customer support team.

5. Data Security Measures

xyz77 implements robust technical, physical, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

5.1 Encryption and Technical Safeguards

  • 256-Bit SSL Encryption: All data transmitted between your device and xyz77 servers is encrypted using industry-standard 256-bit Secure Socket Layer (SSL) technology, the same encryption used by major Indonesian banks like BCA and Mandiri.
  • Encrypted Data Storage: Sensitive information such as passwords, financial data, and identification documents are stored in encrypted form on secure servers with restricted access.
  • Firewall Protection: Multi-layer firewalls protect xyz77 infrastructure from external threats and unauthorized intrusion attempts.
  • Secure Payment Gateways: All financial transactions are processed through PCI-DSS compliant payment gateways that meet international security standards.
  • Regular Security Audits: Third-party security experts conduct periodic vulnerability assessments and penetration testing to identify and address potential weaknesses.

5.2 Access Controls

  • Personal data is accessible only to authorized xyz77 employees and contractors who require access to perform their job functions (e.g., customer support staff assisting with KYC verification, finance team processing withdrawals).
  • All employees with data access are bound by strict confidentiality agreements and receive regular data protection training.
  • Multi-factor authentication and role-based access controls limit who can view or modify sensitive information.
  • Access logs are maintained and regularly reviewed to detect any unauthorized access attempts.

5.3 Physical Security

xyz77's data centers and server facilities employ physical security measures including 24/7 surveillance, biometric access controls, and environmental monitoring systems to protect hardware infrastructure.

5.4 Security Limitations

While xyz77 employs industry-leading security practices, no system is completely immune to security breaches. We cannot guarantee absolute security of data transmitted over the internet or stored electronically. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access to your account.

6. Cookies and Tracking Technologies

xyz77 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our Website, analyze usage patterns, and deliver personalized content.

6.1 Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Required for basic Website functionality, account login, secure transactions, and navigation. These cookies cannot be disabled. Session or up to 1 year
Performance Cookies Collect anonymized data about Website usage, page load times, and error messages to improve performance. Up to 2 years
Functional Cookies Remember your preferences (language, timezone WIB, game favorites) to personalize your experience. Up to 1 year
Advertising Cookies Track your browsing behavior to display relevant promotional offers and bonuses. Up to 1 year

6.2 Managing Cookie Preferences

You can manage or delete cookies through your browser settings. Most browsers allow you to block or delete cookies, though disabling essential cookies may impair xyz77 functionality (e.g., you may not be able to log in or place bets). Instructions for managing cookies vary by browser:

  • Google Chrome: Settings > Privacy and Security > Cookies and other site data
  • Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Microsoft Edge: Settings > Cookies and site permissions

7. Your Privacy Rights

As an xyz77 user, you have the following rights regarding your personal information:

7.1 Right to Access

You may request a copy of all personal information xyz77 holds about you. We will provide this information in a commonly used electronic format (typically PDF) within 30 days of receiving your request.

7.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact customer support for assistance with KYC documents or financial information.

7.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data, subject to certain limitations. xyz77 must retain some information to comply with legal obligations (e.g., financial transaction records for tax and anti-money laundering purposes, typically 5-7 years under Indonesian law). After required retention periods expire, we will delete or anonymize your data.

7.4 Right to Data Portability

You may request your personal data in a structured, machine-readable format (e.g., CSV or JSON) to transfer to another service provider.

7.5 Right to Object and Restrict Processing

You may object to certain types of data processing, particularly marketing communications. You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing message or adjusting your communication preferences in account settings.

7.6 Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time. However, this will not affect the lawfulness of processing that occurred before consent was withdrawn.

7.7 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer via live chat or email. We may require identity verification before processing your request to ensure we are disclosing information only to the rightful account owner.

8. Data Retention

xyz77 retains personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

General Retention Periods

  • Account Information: Retained for the duration of your active account plus 7 years after account closure to comply with Indonesian financial regulations and anti-money laundering requirements.
  • Transaction Records: Deposits, withdrawals, and betting history retained for 7 years as required by tax authorities and financial regulators.
  • KYC Documents: Identity verification documents retained for 7 years after account closure for regulatory compliance.
  • Customer Support Communications: Retained for 3 years to resolve disputes and improve service quality.
  • Marketing Data: Deleted immediately upon opt-out request or after 2 years of account inactivity.
  • Technical Logs: Server logs and IP addresses retained for 12 months for security and fraud prevention purposes.

After applicable retention periods expire, personal data is securely deleted or anonymized to prevent identification.

9. International Data Transfers

xyz77 primarily serves Indonesian players and stores data on servers located within secure international data centers. Some of our service providers (game providers, payment processors, cloud hosting) may be located outside Indonesia. When we transfer personal data internationally, we ensure adequate safeguards are in place, including:

  • Standard contractual clauses approved by data protection authorities
  • Data processing agreements requiring equivalent protection standards
  • Encryption during transmission and at rest
  • Regular compliance audits of third-party processors

By using xyz77 Services, you consent to international data transfers necessary to provide our gaming platform, process transactions, and deliver customer support.

10. Children's Privacy

xyz77 strictly prohibits use of our Services by individuals under 21 years of age, in accordance with Indonesian gambling regulations. We do not knowingly collect personal information from anyone under 21. Our KYC verification process requires government-issued identification to confirm age eligibility.

If we discover that we have inadvertently collected information from a person under 21, we will immediately delete that information and permanently close the associated account. Any winnings will be forfeited, and deposits will be returned to the payment source (if verifiable).

Parents or guardians who believe their child has accessed xyz77 and provided personal information should contact our customer support immediately for investigation and account closure.

11. Changes to This Privacy Policy

xyz77 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

  • Posting a prominent notice on the xyz77 Website homepage
  • Sending an email to the address associated with your account
  • Displaying a pop-up notification upon your next login

The "Last Updated" date at the top of this page indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how xyz77 protects your data. Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or xyz77's data protection practices, please contact us:

  • Data Protection Officer: Available via live chat 24/7
  • Email: [email protected] (displayed as plain text for your reference)
  • Customer Support: Available in Indonesian and English, 24 hours a day, 7 days a week
  • Response Time: We aim to acknowledge all privacy inquiries within 24 hours and provide substantive responses within 7 business days

Your Data Security is Our Priority

xyz77 employs bank-grade 256-bit SSL encryption, rigorous KYC verification, and multi-layer security protocols to protect Indonesian players' personal and financial information. We never sell your data to third parties. Your trust is the foundation of our platform.

Remember: Never share your xyz77 login credentials with anyone. Our staff will never ask for your password. If you suspect unauthorized account access, contact support immediately to secure your account.

How xyz77 Protects Your Privacy

256-Bit SSL Encryption

All data transmitted between your device and xyz77 servers is protected with bank-grade encryption. Your personal information, financial details, and KYC documents are secured with the same technology used by major Indonesian banks.

Strict KYC Verification

Our Know Your Customer process verifies your identity using Indonesian ID cards (KTP), preventing fraud and underage gambling. All KYC documents are stored encrypted and accessible only to authorized compliance staff.

No Data Selling

xyz77 never sells, rents, or trades your personal information to third parties for marketing purposes. Your data is used exclusively to provide gaming services, process transactions, and ensure regulatory compliance.

Secure Data Centers

Your information is stored on servers in secure international data centers with 24/7 physical security, environmental monitoring, and redundant backup systems to prevent data loss.

Access Controls

Only authorized xyz77 employees with legitimate business needs can access your personal data. All staff are bound by strict confidentiality agreements and receive regular data protection training.

Regular Security Audits

Independent third-party security experts conduct periodic vulnerability assessments and penetration testing to identify and address potential weaknesses in our infrastructure.

Questions About Your Privacy?

Our customer support team is available 24/7 to address privacy concerns, assist with data access requests, or help you update account information. Visit our FAQ for common questions, review our Terms & Conditions, or explore Responsible Gaming resources.

Visit FAQ Terms & Conditions Responsible Gaming Back to Home