Privacy Policy

1 Introduction

7f7f ("we", "us", "our") is committed to protecting and respecting the privacy of every person who accesses or uses the 7f7f online gaming platform at https://7f7f.asia (the "Platform"). This Privacy Policy describes in full how we collect, use, disclose, transfer, and store information about you in connection with your use of our services.

This policy applies to all players registered on 7f7f, visitors to the Platform who have not yet registered, and any individuals who interact with 7f7f through our customer support channels (live chat, email, WhatsApp). It should be read alongside our Terms & Conditions, which govern the overall relationship between you and 7f7f.

By registering an account on the Platform, completing the KYC verification process, or continuing to use 7f7f's services after this policy has been updated, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not agree with any aspect of this Privacy Policy, you should not use the Platform and should contact us to request account closure.

2 Definitions

Throughout this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, national identity number (KTP), date of birth, residential address, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, combination, restriction, deletion, or destruction.
• "Data Controller" — 7f7f, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party that processes Personal Data on behalf of 7f7f under a contractual arrangement, such as payment processors, KYC verification providers, and cloud infrastructure providers.
• "Player" / "you" — any individual who has registered or is in the process of registering an account with 7f7f, or who uses the Platform in any capacity.
• "Cookies" — small data files stored on your device by the Platform for purposes of session management, analytics, and personalization.
• "KYC" — Know Your Customer verification procedures, including submission of identity documents such as your Indonesian National Identity Card (KTP — Kartu Tanda Penduduk).

3 Data We Collect

7f7f collects the following categories of Personal Data in connection with the provision of its services:

3.1 Registration & Identity Data

• Full legal name as it appears on your KTP
• Date of birth and age confirmation (21+ verification)
• Indonesian National Identity Card number (NIK — Nomor Induk Kependudukan)
• Residential address (kelurahan, kecamatan, city, province)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Financial & Transaction Data

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, and Bank Permata transfers
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal transaction history, including timestamps, amounts in IDR, and originating payment methods
• Wagering history, game session records, and bonus utilization records

3.3 Technical & Device Data

• IP address and approximate geolocation derived from IP data
• Device type, operating system, browser type and version
• Session tokens and login timestamps
• Platform interaction logs (pages visited, features used, errors encountered)

3.4 KYC Verification Data

• Photographs of identity documents (KTP front and back)
• Selfie photographs taken during liveness verification
• Proof of address documents
• Payment method verification screenshots

3.5 Communication Data

• Records of live chat conversations with support agents
• Email correspondence sent to or received from [email protected]
• WhatsApp message records where applicable
• Feedback, complaint, and survey responses

4 How We Collect Data

7f7f collects Personal Data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documentation, make a deposit or withdrawal request, contact our support team, or respond to a survey.
• Automatically through the Platform: Via cookies, session tracking, and server log files that record technical data about your device and interactions with the Platform whenever you visit or use our services.
• From third-party service providers: Including KYC verification partners who conduct identity checks, payment processors who confirm transaction sta tus, and fraud-prevention services that provide risk-scoring data on new registrations.
• From publicly available sources: Where permitted by applicable law, 7f7f may supplement your profile with information drawn from public records or sanction screening databases for compliance purposes.

5 Purpose & Legal Basis

We process your Personal Data only where we have a lawful basis for doing so. The table below summarizes the primary purposes for which 7f7f processes Personal Data and the corresponding legal basis for each:

Where we rely on legitimate interests as a legal basis, we carry out a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request details of any such balancing test by contacting us at [email protected].

6 Data Sharing

7f7f does not sell, rent, or trade your Personal Data. We share data only where strictly necessary for the delivery of our services or where required by law, and only with the categories of recipients described below:

6.1 Licensed Game Providers

Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and Pocket Games Soft receive limited technical data (such as session tokens and player identifiers) to authenticate your gaming sessions. These providers do not receive your full identity or financial data.

6.2 Payment Processors

To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, we share the minimum financial and identity data required to execute and reconcile transactions. All payment processors are contractually bound to process your data only for this purpose.

6.3 KYC and Fraud Prevention Partners

We engage licensed third-party KYC verification and fraud-screening services to assist in identity verification and anti-money laundering compliance. These partners process identity documents, biometric data (liveness checks), and risk-scoring data strictly under data processing agreements with 7f7f.

6.4 Legal and Regulatory Authorities

7f7f will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of 7f7f, its players, or the public. We will notify you of any such disclosure to the extent permitted by law.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of 7f7f's assets, Personal Data held by 7f7f may be transferred to the acquiring or successor entity, subject to that entity assuming the same privacy obligations as those described in this policy. You will be notified of any such transfer via your registered email address.

7 Cookies & Tracking

7f7f uses cookies and similar tracking technologies to operate the Platform efficiently, maintain your session, and improve your experience. The following categories of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, remember your language preferences, and protect against cross-site request forgery. They cannot be disabled without impairing core platform functionality.

7.2 Performance & Analytics Cookies

These cookies collect aggregated, anonymized data about how players use the Platform — which pages are visited most frequently, which game categories are most popular, and where errors occur. This data is used exclusively to improve platform performance and user experience.

7.3 Functional Cookies

These cookies remember your preferences — such as your preferred deposit method, game display settings, and notification configurations — so that you do not need to reconfigure them each time you log in.

7.4 Managing Cookies

You can control cookie settings through your browser's privacy settings. Disabling certain cookies may impair some Platform features. Most modern browsers (Chrome, Firefox, Safari, Edge) provide options to view, block, or delete cookies. Please refer to your browser's help documentation for instructions specific to your browser version.

8 Data Security

7f7f implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Encrypted Data Storage: Sensitive data fields — including KTP numbers, bank account details, and password hashes — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within 7f7f's internal systems is restricted on a strict need-to-know basis. All staff with access to player data undergo background screening and sign confidentiality agreements.
• Two-Factor Authentication (2FA): 7f7f offers 2FA for player accounts to provide an additional layer of security beyond username and password. We strongly recommend enabling this feature in your account settings.
• Penetration Testing: Our platform infrastructure undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 7f7f will notify affected players via their registered email address within seventy-two (72) hours of becoming aware of the breach, in line with international best practice.

While 7f7f employs rigorous security practices, no system is entirely immune to risk. You also play an important role in keeping your data secure by maintaining the confidentiality of your account credentials and logging out after each session, particularly on shared devices.

9 Data Retention

7f7f retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention schedules apply:

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymized in accordance with 7f7f's data destruction procedures. Anonymized, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

10 Your Rights

As a player on the 7f7f platform, you hold a number of rights in relation to your Personal Data. 7f7f is committed to honoring these rights promptly and transparently. Your rights are summarized below:

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and respond in full within ten (10) business days. In complex cases, this period may be extended by a further ten (10) business days, of which we will notify you in advance.

Please note that some rights are subject to limitations. For example, we cannot delete transaction records that we are legally required to retain, and we cannot provide access to data that would reveal information about another individual.

11 Minors

7f7f's services are strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect Personal Data from anyone under the age of 21. Our registration process includes an age declaration step, and KYC verification requires submission of a government-issued identity document confirming date of birth.

If 7f7f becomes aware that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the associated Personal Data to the extent permitted by law, and return any deposited funds (net of bonuses) to the originating payment method. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

12 International Transfers

7f7f's platform infrastructure and Data Processors may be located in jurisdictions outside of Indonesia. Where your Personal Data is transferred to a country that does not provide the same level of data protection as your home jurisdiction, 7f7f ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating internationally recognized standard contractual clauses for data transfers.
• Requiring all Data Processors to maintain technical and organizational security measures at a standard equivalent to or exceeding those described in Section 8 of this policy.
• Conducting due diligence assessments on third-party Data Processors before engagement and on an ongoing basis thereafter.

By using the 7f7f Platform, you acknowledge and consent to the transfer of your Personal Data to servers and Data Processors located outside of Indonesia, subject to the safeguards described above.

13 Marketing Communications

7f7f may send you promotional communications about bonuses, new game releases, seasonal promotions (such as those tied to Idul Fitri, Ramadhan, and Indonesian Independence Day), VIP tier upgrades, and platform features. All marketing communications are sent on an opt-in basis only.

During registration, you will be asked whether you wish to receive marketing communications by email, SMS, and/or WhatsApp. You may change your marketing preferences at any time through your account notification settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of any communications sent prior to your withdrawal.

14 Third-Party Links

The 7f7f Platform may contain references to third-party services, including payment providers and game studios. This Privacy Policy applies exclusively to Personal Data collected and processed by 7f7f. Third-party services operate under their own privacy policies, and 7f7f accepts no responsibility for the data practices of any third-party service. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.

15 Policy Amendments

7f7f reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where amendments are material — meaning they significantly affect your rights or the way we process your Personal Data — we will provide at least seven (7) days' advance notice via a prominent notice on the Platform and/or an email to your registered address.

Non-material amendments (such as clarifications, typographical corrections, or updates to contact details) may take effect immediately upon publication. The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy.

16 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 7f7f has handled your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" so that your message is routed to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week through the Platform interface. Our Indonesian-speaking agents can assist in directing your privacy enquiry to the appropriate team.
• WhatsApp: Available 09:00 – 23:00 WIB daily for general privacy questions.

We take all privacy complaints seriously and aim to resolve them within ten (10) business days. If you are not satisfied with our response to your complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction.