Privacy Policy

1. Introduction

kado77 is committed to protecting the privacy and personal data of every player who uses our platform. We operate an online casino and sports betting service tailored to Indonesian players who value international-grade security and professional service standards. The protection of your personal information is not merely a legal obligation for us — it is a core operational principle that underpins the trust our players place in kado77.

This Policy applies to all personal data collected through the kado77 website, mobile-optimized interfaces, customer support channels, and any other touchpoints through which you interact with our platform. It applies to registered Players as well as unregistered visitors who browse the site.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the kado77 platform and are incorporated into this Policy by reference.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, location data, online identifiers, or any factor specific to that person's identity.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means kado77, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of kado77 under a data processing agreement.
• "KYC Data" means identity verification documentation including government-issued identification, selfie photographs, and supporting financial documents submitted for Know Your Customer compliance purposes.
• "Cookies" means small text files stored on a user's device by the Platform for the purpose of recognizing returning visitors, maintaining session integrity, and supporting analytics.
• "Player" means a registered user of the kado77 platform who has opened a verified account.

3. Personal Data We Collect

kado77 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

3.1 Registration Data

• Full legal name (as it appears on your Indonesian National Identity Card / KTP or passport)
• Date of birth (for age verification — players must be 21 or older)
• Email address
• Indonesian mobile phone number
• City and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Medan)
• Username and encrypted password

3.2 KYC Verification Data

• Photographic copy of government-issued identity document (KTP or passport)
• Selfie photograph holding the identity document
• Bank account details for withdrawal verification (account name, account number, and bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga)
• Source-of-funds documentation where required for enhanced due diligence

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and transaction reference numbers
• Payment method identifiers (bank account numbers, e-wallet identifiers for OVO, DANA, GoPay, ShopeePay)
• Account balance history

3.4 Gaming Activity Data

• Bet history, game session records, win/loss records across all game types including slots, live dealer tables, sports betting, togel (Indonesian lottery), and sabung ayam (cockfighting) streams
• Responsible gaming tool usage (deposit limits, self-exclusion requests, time-out periods)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps, page visit logs, and click-path data
• Referral source and marketing attribution data

3.6 Customer Support Data

• Content of communications submitted via live chat, email, or any other support channel
• Complaint and dispute records

4. How Personal Data Is Collected

kado77 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — through cookies, web beacons, log files, and similar tracking technologies that record your interactions with the Platform.
• From third parties — from identity verification service providers, payment processors, fraud detection agencies, and banking partners where necessary to validate your identity or process your transactions securely.

5. Purpose of Processing

kado77 processes your personal data for the following specific purposes:

Purpose	Data Categories Used
Account registration and management	Registration Data, Device Data
Identity verification (KYC) and age confirmation	KYC Verification Data, Registration Data
Processing deposits and withdrawals	Financial Transaction Data, KYC Data
Delivering gaming services and calculating outcomes	Gaming Activity Data, Technical Data
Fraud prevention and security monitoring	Technical Data, Financial Data, Gaming Data
Responsible gaming monitoring and intervention	Gaming Activity Data, Registration Data
Customer support and dispute resolution	Support Data, Registration Data, Transaction Data
Promotional communications (where consented)	Registration Data, Gaming Activity Data
Platform analytics and service improvement	Technical Data, Gaming Activity Data
Legal and regulatory compliance	All categories as required

6. Legal Basis for Processing

kado77 processes personal data on the following legal bases:

• Contract performance — processing is necessary to provide the services you have signed up for, including account management, payment processing, and game delivery.
• Legal obligation — processing is required to comply with applicable KYC, anti-money laundering, and responsible gaming regulatory requirements.
• Legitimate interests — processing is necessary for fraud prevention, platform security, service optimization, and responsible gaming monitoring, where those interests are not overridden by your rights.
• Consent — for optional processing activities such as promotional email communications. You may withdraw consent at any time by contacting [email protected].

7. Data Sharing & Disclosure

7.1 kado77 does not sell, rent, or exchange your personal data with third-party marketers or advertising networks under any circumstances.

7.2 We may share personal data with the following categories of recipients only to the extent strictly necessary for the stated purpose:

• Payment processors and banking partners — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for the processing of deposits and withdrawals.
• Identity verification providers — third-party KYC service providers who assist in verifying identity documents and conducting age verification checks.
• Game content providers — licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, which may receive session identifiers and wager data to deliver game outcomes.
• Fraud prevention and security services — specialist providers who analyze transaction patterns and device fingerprints to detect and prevent fraudulent activity.
• IT infrastructure providers — cloud hosting and data center operators who store platform data under strict contractual data protection obligations.
• Legal and regulatory authorities — where required by applicable law, court order, or regulatory directive, kado77 will disclose personal data to the relevant competent authority.

7.3 All third-party Data Processors engaged by kado77 are bound by written data processing agreements that require them to process personal data only on kado77's documented instructions and to maintain appropriate security standards.

8. International Data Transfers

8.1 As an internationally operated platform serving Indonesian players, kado77 may transfer personal data to servers and service providers located outside of Indonesia. Where such transfers occur, kado77 ensures that appropriate safeguards are in place, including contractual protections equivalent to internationally recognized data protection standards.

8.2 By using the kado77 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia where kado77 or its service providers maintain operational infrastructure, subject to the safeguards described in this section.

9. Data Retention

9.1 kado77 retains personal data for only as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable regulatory obligations.

9.2 Specific retention periods by data category:

• Account and KYC data — retained for a minimum of 5 years from account closure to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records — retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs — retained for 2 years from the date of activity, or longer if required by a regulatory inquiry or dispute resolution process.
• Customer support communications — retained for 2 years from the date of the last interaction.
• Technical and device data — retained for 12 months from collection, unless required longer for fraud investigation purposes.

9.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data.

10. Cookies & Tracking Technologies

10.1 kado77 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform effectively. The following categories of cookies are used:

• Strictly necessary cookies — essential for platform functionality, session management, and security. These cannot be disabled without impairing core platform features.
• Performance cookies — used to collect anonymized analytics data about how players navigate the Platform, helping us identify and fix performance issues.
• Functional cookies — used to remember your preferences such as language settings and last-used payment method to improve your experience.
• Security cookies — used to support fraud detection, bot prevention, and suspicious login monitoring.

10.2 kado77 does not use third-party advertising cookies or behavioral profiling cookies that track your activity across other websites.

10.3 Most web browsers allow you to control cookie settings through the browser's preferences panel. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform.

11. Your Data Rights

11.1 As a player using the kado77 Platform, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data kado77 holds about you at any time.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction — you may request that we restrict processing of your data in certain circumstances, for example while a complaint is being investigated.
• Right to data portability — you may request that we provide your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent — where processing is based on consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing carried out on the basis of legitimate interests where you believe your rights and freedoms override those interests.

11.2 To exercise any of these rights, please contact our Data Protection contact at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your request. We may require identity verification before processing your request.

12. Security Measures

12.1 kado77 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data in transit between user devices and kado77 servers.
• AES-256 encryption for sensitive personal data stored at rest, including KYC documents and financial identifiers.
• Role-based access controls ensuring that only authorized personnel with a legitimate business need can access personal data.
• Two-factor authentication (2FA) enforced for all administrative system access.
• Regular third-party security audits and penetration testing of the Platform infrastructure.
• Intrusion detection systems and real-time security monitoring with automated alerting for anomalous activity.
• Secure data disposal procedures ensuring that deleted data cannot be reconstructed.

12.2 In the event of a personal data breach that poses a material risk to players, kado77 will notify affected individuals and relevant authorities within the timeframe required by applicable data protection regulations.

13. Minors & Age Restrictions

13.1 kado77 is strictly an Adults Only (21+) platform. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in our registration and KYC process.

13.2 If kado77 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted (subject to any legally required retention period), and any deposited funds will be returned to the originating payment source.

13.3 If you believe that a minor has registered on the kado77 Platform, please notify us immediately at [email protected] so that we can take prompt remedial action.

14. Third-Party Content & Links

14.1 The kado77 Platform may display content sourced from licensed third-party game providers (including Pragmatic Play, Evolution Gaming, and Spribe). These providers operate their own platforms within the kado77 interface and may process certain technical session data under their own privacy practices.

14.2 kado77 is not responsible for the privacy practices of third-party game studios, payment processors, or any other external service whose content appears within the Platform. We encourage you to review the privacy policies of any third-party service you interact with.

15. Amendments to This Policy

15.1 kado77 reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered Players via email notification to the address on file, or via a prominent notice displayed on the Platform, at least 7 days before the revised Policy takes effect.

15.2 Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment and acceptance of the revised Privacy Policy. The "Last Updated" date at the top of this page indicates the most recent revision.

15.3 The current version of this Privacy Policy is always accessible at https://kado77.cam/privacy-policy.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or kado77's personal data practices, please reach out to our team:

• Email: [email protected]
• Subject line for data requests: "Data Rights Request" or "Privacy Inquiry"
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 calendar days.

For matters related to account security, responsible gaming, or account closure, please also refer to our Responsible Gaming page and our Terms & Conditions.