Privacy Policy

1 Definitions

Throughout this Privacy Policy, the following terms are used with the meanings given below:

• "join77", "we", "us", or "our" refers to the licensed entity operating the join77 platform at https://join77.cam.
• "Platform" means the join77 website, mobile interface, APIs, and all associated software and services.
• "Player", "Member", "you", or "your" refers to any registered user or visitor of the Platform.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means join77 in its capacity as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of join77 under a written data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process required for account approval and withdrawal processing.
• "Cookie" means a small text file placed on your device by the Platform to support session management, analytics, and personalization.

2 Scope & Application

This Privacy Policy applies to all Personal Data collected by join77 in connection with the operation of the Platform, regardless of whether the data was provided by you directly, collected automatically through your use of the Platform, or received from third-party sources.

This policy applies to all current and former Members, as well as visitors who browse the Platform without registering. It covers data collected through:

• The join77 website at https://join77.cam and any subdomains.
• Mobile-optimized browser interfaces accessed from devices in Indonesia or elsewhere.
• Customer support communications via live chat or email.
• Identity and payment verification processes (KYC).

3 Data We Collect

join77 collects the following categories of Personal Data:

4 How We Collect Data

Personal Data is collected through the following channels:

• Direct submission: When you register an account, complete KYC, make a deposit or withdrawal, or contact support, you actively provide us with Personal Data.
• Automated collection: When you browse the Platform, we automatically collect Technical Data and Usage Data via server logs, cookies, and analytics tools.
• Payment partners: When you transact via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, or other supported Indonesian payment channels, our payment processors share transaction confirmation data with us.
• Identity verification services: During KYC processing, our verification partners may return enriched identity data to confirm document authenticity.
• Fraud and AML screening: We may receive risk-scoring data from third-party fraud prevention and anti-money laundering services in relation to your transactions.

5 How We Use Your Data

join processes Personal Data for the following purposes:

• To create, manage, and administer your Member account on the Platform.
• To verify your identity and confirm that you are at least 21 years of age, in accordance with our eligibility requirements.
• To process deposits and withdrawal requests denominated in Indonesian Rupiah (IDR / Rp).
• To provide customer support and resolve disputes or technical issues.
• To detect, prevent, and investigate fraud, collusion, money laundering, and other prohibited activity.
• To comply with our international regulatory obligations, including record-keeping and Know Your Customer (KYC) requirements.
• To monitor betting activity for responsible gaming purposes and identify signs of problem gambling.
• To improve the functionality, security, and user experience of the Platform.
• To send you service-related notifications, including transactional confirmations and policy updates.
• To send you promotional communications where you have given separate, affirmative marketing consent.

6 Legal Basis for Processing

join77 processes Personal Data on the following legal bases:

• Performance of a contract: Processing is necessary to provide the services you have requested, including account management, betting, deposits, and withdrawals.
• Legal obligation: Processing is necessary to comply with applicable international anti-money laundering, KYC, and record-keeping laws.
• Legitimate interest: Processing is necessary for fraud prevention, Platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing of marketing communications and optional cookies is based on your explicit, freely given consent, which you may withdraw at any time.

7 Cookies & Tracking

join77 uses cookies and similar tracking technologies to support Platform functionality, security, and analytics. The following categories of cookies are used:

• Essential cookies: Required for core Platform features such as user session authentication, secure login, and bet placement. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember user preferences, such as display settings and language selection.
• Analytics cookies: Collect anonymized data about how visitors interact with the Platform, helping us improve usability and performance.
• Security cookies: Used to detect and prevent fraud, account takeovers, and abusive activity.

You may configure your browser to block or delete cookies at any time. However, blocking essential cookies may prevent you from accessing certain features of the Platform, including the ability to log in and place bets.

8 Data Sharing & Third Parties

join77 does not sell, rent, or trade your Personal Data. Your data is shared only with the following categories of recipients, each bound by contractual confidentiality and data protection obligations:

• Payment processors: Banks and e-wallet providers that execute deposit and withdrawal transactions on our behalf.
• Identity verification providers: KYC and document authentication services used during registration and verification.
• Fraud prevention & AML screening services: Risk scoring and transaction monitoring partners.
• Game and software studio partners: Licensed game providers whose content is integrated into the Platform.
• Hosting and infrastructure providers: Data center and cloud service providers that store Platform data under strict security controls.
• Regulators and law enforcement: Where required by applicable law or in response to a valid legal request.

9 International Data Transfers

join77 operates as an internationally licensed platform. As a result, your Personal Data may be transferred to and processed in jurisdictions outside Indonesia where our servers, payment processors, and service partners are located. These jurisdictions may have data protection laws that differ from those applicable in Indonesia.

Where such international transfers occur, join77 ensures that appropriate safeguards are in place, including one or more of the following:

• Transfers only to entities located in jurisdictions recognized as providing adequate data protection.
• Contractual clauses that impose data protection obligations equivalent to those set out in this Privacy Policy.
• Binding corporate rules or recognized certification frameworks where applicable.

10 Data Retention

join77 retains Personal Data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required by law. The following retention periods apply:

• Account data: Retained for the duration of your membership and for a minimum of five years following account closure, in line with anti-money laundering regulations.
• Transaction and betting records: Retained for a minimum of five years from the date of the transaction.
• KYC documentation: Retained for a minimum of five years from the date of account closure.
• Marketing consent records: Retained for as long as the consent remains active, subject to annual review.
• Support communications: Retained for up to two years from the date of the last interaction.
• Abandoned account registrations: Retained for up to ten days before deletion.

11 Data Security

join77 implements industry-standard technical and organizational measures to protect your Personal Data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform.
• AES-256 encryption for data stored at rest on our servers.
• Firewalls, intrusion detection systems, and continuous network monitoring across all Platform infrastructure.
• Role-based access controls that restrict access to Personal Data to authorized personnel only.
• Two-factor authentication (2FA) for account access, available to all Members.
• Annual security audits and penetration testing by independent third-party security firms.
• Mandatory confidentiality and data protection training for all staff who handle Personal Data.

12 Your Rights

As a data subject, you have the following rights in relation to your Personal Data held by join77. These rights may be exercised free of charge, subject to verification of identity:

• The right to access: You may request a copy of all Personal Data join77 holds about you.
• The right to rectification: You may request that inaccurate or incomplete Personal Data be corrected.
• The right to erasure: You may request deletion of your Personal Data, subject to legal retention obligations (Requests may be refused where AML law requires retention).
• The right to restriction of processing: You may request that processing of your data be restricted under certain circumstances.
• The right to data portability: You may request your Personal Data in a structured, machine-readable format.
• The right to object: You may object to processing based on legitimate interest or to receive marketing communications.
• The right to withdraw consent: You may withdraw previously granted consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact join77 via the channel below with the subject line "Data Subject Request." join77 will respond within 30 calendar days of receiving a verified request.

13 Children & Minors

The join77 Platform is strictly for adults aged 21 years and over. We do not knowingly collect, process, or solicit Personal Data from individuals under 21 years of age. If join77 becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, that data will be immediately deleted and any associated account will be permanently closed and its balance voided.

14 Policy Amendments

join77 reserves the right to amend, update, or replace this Privacy Policy at any time. When material changes are made, join77 will publish the updated policy on the Platform and update the "Last Updated" date at the top of this document. For significant changes that affect your rights, join77 will notify registered Members by email.

Continued use of the Platform following publication of an amended Privacy Policy shall constitute your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and close your account.

15 Governing Law

This Privacy Policy is governed by and construed in accordance with the law of the jurisdiction in which join77 holds its international gaming license. Any dispute relating to the collection, use, or storage of your Personal Data shall be subject to the exclusive jurisdiction of the competent courts or arbitration body of that jurisdiction.

16 Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your Personal Data, you may contact join77's Data Protection Officer through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the in-Platform chat widget
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)