Privacy Policy

spg77 ("we", "us", "our") is the operator of the online gaming and sports betting platform accessible at spg77.cam. In the course of providing our services to you, we collect, process, store, and in some cases transfer personal data relating to you as a registered user ("User", "Member", "you"). This Privacy Policy sets out our practices with respect to that data and explains the rights available to you.

We are committed to processing personal data lawfully, fairly, and transparently — collecting only what is strictly necessary, retaining it for no longer than required, and protecting it with industry-standard technical and organisational security measures throughout. This commitment applies equally to Users in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and across the Indonesian archipelago.

By registering an account on spg77 and using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please do not create an account or use the platform.

We collect personal data from you through several channels: directly when you register and interact with the platform, automatically through your use of the site, and from third parties where necessary for identity verification and fraud prevention.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, Indonesian residential address, email address, and mobile phone number.
• Identity verification (KYC) documents: Government-issued photo identification (KTP, passport, or SIM), proof of residential address, and — where required — source-of-funds declarations.
• Payment data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) provided at the time of deposit or withdrawal. We do not store full banking credentials; all payment data is handled through secure, encrypted processing channels.
• Support communications: Messages, emails, and chat transcripts exchanged between you and the spg77 customer support team.
• Self-exclusion and responsible gaming requests: Records of deposit limits, session restrictions, cool-off periods, and self-exclusion elections you submit through our responsible gaming tools.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: Pages visited, features accessed, session duration, click-stream data, search queries made within the platform, and game history.
• Transaction data: Complete records of all deposits, withdrawals, wagers, bonus claims, and balance adjustments associated with your account.
• Cookies and similar technologies: See Section 5 for a full breakdown of how we use cookies and tracking technologies.

2.3 Data from Third Parties

• KYC and identity verification providers: Third-party identity verification services may return match results and risk scores associated with the documents you submit.
• Payment processors: Transaction confirmation and status data returned by bank APIs and e-wallet gateway providers.
• Fraud detection services: Risk signals and device-fingerprint data from specialist fraud-prevention vendors used to protect the integrity of the platform.

spg77 uses the personal data it collects solely for the purposes described below. We do not use your personal data for any purpose incompatible with the original reason it was collected without obtaining your explicit consent first.

• Account creation and management: To register your account, authenticate your identity at login, maintain your account settings, and manage your session securely.
• Service delivery: To process your bets, operate game sessions, calculate winnings, apply bonuses, and provide the full range of gaming and sports betting services available on the platform.
• Payment processing: To execute deposit and withdrawal transactions through your nominated bank account or e-wallet, and to maintain an accurate record of all financial activity on your account in IDR.
• Identity verification and regulatory compliance: To verify your age (21+ requirement), confirm your identity, satisfy our anti-money laundering (AML) obligations, and comply with any applicable legal or regulatory requirements.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, account compromise, bonus abuse, and any other activity that may harm the platform or its users.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and deliver the 24/7 support service aligned to WIB (UTC+7).
• Responsible gaming: To monitor gaming patterns for signs of problematic behaviour, enforce the player-protection tools you have elected, and proactively reach out where our responsible gaming protocols are triggered.
• Marketing and promotions: Where you have consented, to send you information about bonuses, promotions, new games, and seasonal offers relevant to the Indonesian market. You may withdraw this consent at any time by contacting support or updating your account preferences.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve platform performance, game selection, and user experience.

We process your personal data on one or more of the following legal bases, depending on the specific processing activity:

spg77 uses cookies and similar browser-based technologies to deliver a functional, personalised, and secure platform experience. A cookie is a small text file stored on your device by your browser at the instruction of our servers. Cookies do not contain executable code and cannot access other files on your device.

5.1 Categories of Cookies We Use

5.2 Managing Cookies

You can control and delete cookies through your browser settings. Specific instructions vary by browser (Chrome, Firefox, Safari, Edge). Please note that disabling strictly necessary or fraud-prevention cookies may make it impossible to log in or use core platform features. Adjusting your cookie preferences does not affect the personal data we hold about you for account and compliance purposes — to exercise those rights, see Section 9.

spg77 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose.

6.1 Service Providers and Data Processors

We engage trusted third-party service providers who process personal data on our behalf and under our documented instructions. These include:

• Payment gateway operators who process IDR transactions via local bank channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity verification vendors who perform automated KYC document checks and return match results to us.
• Fraud-prevention and risk-management providers who analyse device signals and behavioural data to detect suspicious activity.
• Game content studios (including Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, and Spribe) who may receive anonymised session identifiers necessary to deliver their game content to you. These studios do not receive your name, address, or payment details.
• Cloud infrastructure and data hosting providers who store platform data in secure, access-controlled environments.
• Customer support software providers whose platforms facilitate live chat and ticketing.

All third-party processors are bound by contractual data processing agreements that require them to maintain appropriate security standards and to process your data only as directed by spg77.

6.2 Legal and Regulatory Disclosures

We may disclose personal data to governmental authorities, law enforcement agencies, regulatory bodies, or courts where we are compelled to do so by applicable law, court order, or binding regulatory requirement. Where permitted, we will notify you of such a disclosure request before complying.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of spg77's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected Users via the email address on record prior to any such transfer occurring, and the acquiring entity will be required to process your data on terms no less protective than those set out in this policy.

We retain your personal data for as long as your account remains active and for a defined period thereafter, as required by law or as necessary to fulfil the purposes described in this policy.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

spg77 implements a multi-layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. Our key technical and organisational security measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers, ensuring that login credentials, payment data, and session activity cannot be intercepted in transit.
• Encryption at rest for sensitive personal data fields including identity documents, payment details, and account credentials stored in our databases.
• Access controls: Personal data is accessible only to authorised spg77 personnel and third-party processors on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication requirements for all internal systems.
• Intrusion detection and monitoring: Continuous automated monitoring of our infrastructure for anomalous activity, potential intrusions, and security incidents, with a dedicated security response procedure.
• Regular security assessments: Periodic vulnerability assessments and penetration testing of platform infrastructure and application code.
• Secure development practices: All platform code is developed and reviewed against industry-standard secure coding guidelines to minimise the risk of application-layer vulnerabilities.

While we apply robust security controls, no system connected to the internet is entirely immune to risk. In the event of a personal data breach that poses a risk to your rights, we will notify affected Users without undue delay and take all reasonable steps to contain and remediate the breach.

You are also responsible for your own account security. You must keep your login credentials confidential, use a strong and unique password, and contact us immediately at [email protected] if you suspect any unauthorised access to your account.

As a data subject, you hold a set of rights with respect to the personal data we process about you. To exercise any of the rights described below, please contact us in writing at [email protected] with the subject line "Data Rights Request" and include sufficient information to verify your identity.

• Right of Access: You have the right to request confirmation of whether we process personal data about you, and to receive a copy of that data together with information about how it is used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to our legal retention obligations (see Section 7).
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in specific situations — for example, where you contest the accuracy of the data, while we investigate that contest.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a structured, machine-readable copy of your personal data for transfer to another controller.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, direct marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will respond to all verifiable data rights requests within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for reasonable, good-faith requests.

spg77 operates a strict 21+ only policy. We do not knowingly collect personal data from any person under the age of 21. Account registration requires active confirmation that the applicant is at least 21 years old, and all accounts are subject to mandatory KYC age verification before withdrawal processing is permitted.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account or provided personal data to spg77, please contact us immediately at [email protected]. Upon receiving a substantiated report of this nature, we will take all reasonable steps to close the relevant account, cancel any pending transactions, and delete the personal data of the minor from our systems as quickly as practicable.

spg77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will post a notice on the platform and update the "Last Updated" date at the top of this document. For significant changes that materially affect how we use your personal data, we will notify you directly via the email address registered to your account.

Your continued use of the spg77 platform following the posting of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you should cease using the platform and contact us to close your account. The most current version of this Privacy Policy is always available at spg77.cam/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please reach out to the spg77 data team through the following channel:

We target a response time of 30 calendar days for all data rights requests submitted in writing. For general support enquiries, our team is available 24/7 via live chat with an average response time under 5 minutes.