1. Introduction

spy77 is committed to protecting the privacy and personal data of all players who use our online gaming platform. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you register an account, access our Website at spy77.cam, or use any of our Services.

We recognize that trust is fundamental to our relationship with you. By providing transparency about our data practices, implementing industry-leading security measures, and respecting your privacy rights, we aim to earn and maintain that trust. This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of spy77 Services.

By creating an account or using spy77 Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, please do not use our Services.

Your Privacy Matters: spy77 operates under strict data protection standards. We never sell your personal data to third parties, and we only share information when legally required or necessary to provide our Services.

2. Data Controller Information

spy77 is the data controller responsible for the personal data you provide when using our platform. As the data controller, we determine how and why your personal data is processed. Our contact details are provided at the end of this Policy should you have any questions, concerns, or requests regarding your personal data.

spy77 complies with applicable data protection laws and regulations in the jurisdictions where we operate, including Indonesian privacy legislation and international data protection standards. We are committed to handling your data lawfully, fairly, and transparently at all times.

3. What Personal Data We Collect

spy77 collects various categories of personal data necessary to provide gaming services, process transactions, verify your identity, comply with legal obligations, and improve our platform. The types of data we collect include:

3.1 Identity and Contact Information

  • Full legal name as it appears on your government-issued identification
  • Date of birth to verify you meet the minimum age requirement (21+)
  • Email address for account communications and notifications
  • Phone number for account verification and security purposes
  • Residential address including street, city, province, and postal code
  • Nationality and country of residence

3.2 Verification Documents (KYC)

To comply with anti-money laundering (AML) regulations and age verification requirements, we collect copies of identification documents such as:

  • Indonesian National Identity Card (KTP/Kartu Tanda Penduduk)
  • Passport or driver's license (for non-Indonesian residents)
  • Proof of address documents (utility bills, bank statements)
  • Selfie photographs holding your identification document

3.3 Financial and Transaction Data

  • Payment method details: Bank account information (account holder name, bank name, account number), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay account details)
  • Transaction history: Deposits, withdrawals, wagers, winnings, bonuses claimed, and account balance changes
  • Payment verification data: Bank statements or screenshots to verify ownership of payment accounts

3.4 Gaming and Behavioral Data

  • Game history, including games played, bet amounts, outcomes, and timestamps
  • Sports betting selections, odds, stake amounts, and bet settlements
  • Bonus usage and wagering requirement progress
  • Customer support interactions (chat transcripts, email correspondence)
  • Responsible gaming settings (deposit limits, self-exclusion requests, cooling-off periods)

3.5 Technical and Device Information

  • Device data: Device type, operating system, browser type and version, screen resolution
  • Network data: IP address, geolocation data, internet service provider
  • Usage data: Pages visited, time spent on site, navigation patterns, clickstream data
  • Cookies and tracking technologies: Session IDs, preferences, authentication tokens (see Section 10 for details)

4. How We Collect Your Data

spy77 collects personal data through the following methods:

4.1 Information You Provide Directly

When you register an account, complete your profile, submit verification documents, make deposits or withdrawals, contact customer support, or adjust account settings, you voluntarily provide personal data to spy77.

4.2 Information Collected Automatically

We automatically collect certain technical and usage data when you access our Website or use our Services. This includes IP addresses, device identifiers, browser information, and interaction data collected via cookies and similar technologies.

4.3 Information from Third Parties

We may receive limited data from third parties such as payment processors (to verify transactions), identity verification services (to confirm your documents are authentic), and fraud prevention agencies (to detect suspicious activity). We only work with reputable third-party providers who comply with applicable data protection laws.

5. Why We Collect Your Data (Legal Basis)

spy77 processes your personal data based on the following legal grounds:

5.1 Contractual Necessity

We need your personal data to fulfill our contractual obligations under the Terms & Conditions, including creating and managing your account, processing deposits and withdrawals, facilitating gameplay, paying out winnings, and providing customer support. Without this data, we cannot provide our Services to you.

5.2 Legal Compliance

spy77 is legally required to collect and retain certain data to comply with:

  • Age verification laws (verifying you are 21+)
  • Anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
  • Tax reporting obligations in relevant jurisdictions
  • Gaming license requirements and regulatory audits
  • Court orders, law enforcement requests, and legal proceedings

5.3 Legitimate Interests

We process certain data to pursue legitimate business interests that are not overridden by your privacy rights, such as:

  • Preventing fraud, cheating, collusion, and money laundering
  • Protecting account security and detecting unauthorized access
  • Improving platform performance, user experience, and game offerings
  • Analyzing player behavior to identify problem gambling patterns and intervene proactively
  • Marketing our Services to existing players (you can opt out at any time)

5.4 Consent

Where required by law, we obtain your explicit consent before processing certain data, such as sending promotional emails or using non-essential cookies. You can withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Who We Share Your Data With

spy77 does not sell your personal data to third parties. We only share your data in the following limited circumstances:

6.1 Payment Processors

We share payment-related data with banks, e-wallet providers, and payment gateways to facilitate deposits and withdrawals. Examples include BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and ShopeePay. These providers are bound by confidentiality obligations and data protection laws.

6.2 Identity Verification Services

We share identification documents with third-party KYC providers who verify the authenticity of your documents and confirm your age and identity. These providers operate under strict data protection standards.

6.3 Fraud Prevention and Security Providers

We share limited data with fraud detection agencies and cybersecurity firms to monitor suspicious activity, prevent unauthorized access, and protect against money laundering and account takeovers.

6.4 Game Providers

When you play games from third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.), we share your username and bet data with those providers to facilitate gameplay. These providers do not receive your financial or identification data.

6.5 Legal and Regulatory Authorities

We may disclose your data to law enforcement agencies, courts, regulators, tax authorities, or gaming commissions when legally required or when we believe disclosure is necessary to comply with legal obligations, enforce our Terms & Conditions, or protect the rights and safety of spy77, our players, or the public.

6.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change, and the new entity will be bound by this Privacy Policy unless you consent to a revised policy.

7. How We Protect Your Data

spy77 implements robust technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

  • 256-bit SSL Encryption: All data transmitted between your device and spy77 servers is encrypted using industry-standard TLS/SSL protocols.
  • Secure Servers: Personal data is stored on encrypted servers located in secure data centers with restricted physical access.
  • Access Controls: Only authorized spy77 personnel with a legitimate business need can access personal data. Access is logged and monitored.
  • Two-Factor Authentication (2FA): We offer optional 2FA to protect your account from unauthorized login attempts.
  • Regular Security Audits: Our systems undergo periodic security assessments and penetration testing by independent cybersecurity experts.
  • Firewall Protection: Advanced firewalls and intrusion detection systems protect against cyberattacks and malware.
  • Employee Training: All spy77 staff receive data protection and cybersecurity training and are bound by confidentiality agreements.

While we implement industry-leading security measures, no system is 100% secure. You also have a responsibility to protect your account by using strong passwords, keeping login credentials confidential, logging out after sessions, and promptly reporting any suspicious activity to our support team.

8. How Long We Keep Your Data

spy77 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our Terms & Conditions.

8.1 Active Accounts

While your account remains active, we retain your personal data to provide Services, maintain transaction records, and ensure account security.

8.2 Closed Accounts

After you close your account, we retain certain data for up to seven (7) years to comply with legal obligations such as AML regulations, tax laws, and gaming license requirements. This includes identification documents, transaction history, and gaming activity records.

8.3 Marketing Data

If you opt out of marketing communications, we retain your email address on a suppression list to ensure we do not contact you again. This data is retained indefinitely unless you request deletion.

8.4 Technical Data

Technical data such as IP addresses and usage logs are typically retained for 12-24 months for security monitoring and fraud prevention purposes, after which they are anonymized or deleted.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal retention requirements.
  • Right to Restriction: Request that we limit processing of your data in certain circumstances.
  • Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Withdraw consent for data processing that was based on your consent, without affecting prior processing.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days. Please note that certain rights may be subject to legal limitations. For example, we cannot delete data we are legally required to retain for AML compliance or regulatory audits.

10. Cookies and Tracking Technologies

spy77 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and provide personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

10.1 Types of Cookies We Use

  • Essential Cookies: Necessary for the Website to function. These enable account login, session management, and secure transactions. You cannot opt out of essential cookies.
  • Performance Cookies: Collect anonymous data about how you use our Website (pages visited, time on site, error messages) to improve performance.
  • Functional Cookies: Remember your preferences (language, region, display settings) to provide a personalized experience.
  • Marketing Cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness. You can opt out of marketing cookies via your browser settings.

10.2 Managing Cookies

Most browsers allow you to block or delete cookies through their settings. However, disabling essential cookies may prevent you from accessing certain features of spy77 Services. Disabling marketing cookies will not affect your ability to use our platform but may result in less personalized content.

11. Children's Privacy

spy77 Services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from minors. If you are under 21, you are prohibited from creating an account or using spy77 Services.

If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and permanently close the associated account. Parents or guardians who believe their child has provided personal data to spy77 should contact us immediately at [email protected].

12. Changes to This Privacy Policy

spy77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you via email or through a prominent notice on our Website at least 30 days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of spy77 Services after the effective date of the revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your data.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how spy77 handles your personal data, please contact our Data Protection Officer:

We aim to respond to all privacy-related inquiries within 30 days. For urgent account security concerns, contact our 24/7 live chat support for immediate assistance.

Your Trust is Our Priority: spy77 is committed to transparency, accountability, and respect for your privacy rights. We continuously review and improve our data protection practices to maintain your trust and confidence.

Our Privacy Principles

Data Minimization

We collect only the personal data necessary to provide Services, comply with legal obligations, and protect your account. No excessive data collection.

No Data Sales

spy77 never sells your personal data to third parties. Your information is used solely for the purposes outlined in this Privacy Policy.

256-Bit SSL Encryption

All data transmissions are encrypted using banking-grade SSL technology. Your sensitive information is protected at every stage.

Your Control

Access, correct, or delete your data at any time. Opt out of marketing communications with a single click. Your privacy, your choice.

Legal Compliance

We comply with Indonesian privacy laws and international data protection standards including GDPR-inspired best practices.

Transparent Retention

We retain data only as long as necessary for legal compliance and service provision. Clear retention periods for every data category.

Questions About Your Data?

Our Data Protection Officer and customer support team are here to help. Contact us anytime to exercise your privacy rights or learn more about how we protect your information.