bpo77 Privacy Policy

1. Introduction

This Privacy Policy governs the collection, processing, storage, and protection of personal information submitted by users of the bpo77 online betting platform (the "Platform") accessible at https://bpo77.cam and associated mobile interfaces. This policy applies to all users who register accounts, deposit funds, place bets, or otherwise interact with our Services.

bpo77 is committed to compliance with international data protection standards and best practices. We recognize that your personal information is valuable and sensitive, and we have implemented comprehensive technical and organizational measures to safeguard your data against unauthorized access, loss, misuse, or disclosure.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform. By creating an account on bpo77, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you should not use our Services.

2. Data Controller Information

For the purposes of applicable data protection laws, the data controller responsible for your personal information is bpo77 and its authorized operators. As the data controller, we determine the purposes and means of processing your personal data and are accountable for compliance with data protection regulations.

All inquiries, requests, or complaints regarding your personal data and our privacy practices should be directed to our Data Protection Officer through the contact methods provided in Section 12 of this Privacy Policy.

3. Information We Collect

bpo77 collects various categories of personal information to provide, maintain, and improve our Services. The information we collect falls into the following categories:

3.1 Information You Provide Directly

When you register an account, verify your identity, or use our Services, you voluntarily provide us with personal information, including:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, username, and password.
• Identity Verification (KYC) Documents: Government-issued photo identification (Indonesian National ID/KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for identity confirmation.
• Financial Information: Bank account details (account holder name, bank name, account number) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon; e-wallet account information for OVO, DANA, GoPay, or ShopeePay; transaction history including deposits, withdrawals, and bet placements.
• Communication Records: Content of customer support inquiries submitted via live chat, email, WhatsApp, or other communication channels; feedback and survey responses.
• Preference Settings: Language preferences, notification settings, responsible gaming limits, and other account customization choices.

3.2 Information Collected Automatically

When you access and use the bpo77 Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, UDID, or similar), and mobile network information.
• Connection Data: IP address, geographic location (country, region, city based on IP address), internet service provider, connection timestamps, and session duration.
• Usage Information: Pages visited, links clicked, games played, bet types and amounts, features accessed, search queries, and interaction patterns on the Platform.
• Performance Data: Page load times, error messages, system crashes, and other technical diagnostic information used to maintain platform stability and security.

3.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection data from banks and payment service providers.
• Identity Verification Services: Identity authentication results from third-party KYC verification providers.
• Fraud Prevention Services: Risk assessment scores and fraud indicators from specialized security services.
• Game Providers: Gameplay data, bet history, and game outcome information from third-party game studios (e.g., Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe).

4. How We Use Your Personal Data

bpo77 processes your personal information for the following legitimate business purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your betting account
• Verifying your identity and age to comply with legal requirements and prevent underage gambling
• Processing deposits, withdrawals, and other financial transactions
• Providing access to sports betting, casino games, slots, togel, sabung ayam, and other gaming products
• Recording and settling bets according to game rules and outcomes
• Managing bonus offers, promotions, and loyalty rewards

4.2 Customer Support and Communication

• Responding to your inquiries, questions, and support requests through live chat, email, or WhatsApp
• Sending account-related notifications including deposit confirmations, withdrawal updates, and security alerts
• Providing information about new features, game releases, and platform improvements
• Conducting customer satisfaction surveys and collecting feedback

4.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, bonus abuse, and account takeovers
• Monitoring for multiple accounts, collusion, and other prohibited activities
• Investigating suspicious transactions and unusual betting patterns
• Complying with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Protecting the security and integrity of the Platform and other users

4.4 Legal Compliance and Obligations

• Complying with international gaming regulations and licensing requirements
• Responding to legal requests from law enforcement authorities or regulatory bodies
• Enforcing our Terms and Conditions and other platform policies
• Resolving disputes and investigating complaints
• Maintaining records required by applicable gambling laws

4.5 Platform Improvement and Analytics

• Analyzing user behavior to understand how players interact with our Services
• Identifying technical issues, bugs, and performance bottlenecks
• Developing new features, games, and betting markets based on user preferences
• Optimizing platform design, navigation, and user experience
• Conducting A/B testing and other research to improve service quality

4.6 Marketing and Promotional Communications (With Consent)

With your explicit consent, we may use your contact information to send promotional materials about:

• Exclusive bonus offers and deposit promotions
• New game releases from providers like Pragmatic Play, Evolution Gaming, and others
• Special events and tournaments
• VIP program upgrades and loyalty rewards

You may opt out of marketing communications at any time by adjusting your account notification settings or clicking "unsubscribe" links in our emails. Opting out of marketing does not affect essential account-related communications.

5. Data Sharing and Disclosure

bpo77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with trusted third parties under the following circumstances:

5.1 Service Providers and Business Partners

We engage reputable third-party service providers to support our operations, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, Habanero, and other game studios to deliver casino games, slots, and live dealer tables.
• KYC Verification Services: Third-party identity verification platforms to authenticate government-issued documents and prevent fraud.
• Cloud Hosting Providers: Secure data centers to host our platform infrastructure and store encrypted data backups.
• Customer Support Software: Live chat, email ticketing, and CRM platforms to manage customer inquiries efficiently.
• Analytics and Security Services: Tools for platform monitoring, fraud detection, and user behavior analysis.

All third-party service providers are contractually obligated to maintain strict confidentiality, use your data only for specified purposes, and implement appropriate security measures.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, or courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or subpoenas
• Respond to requests from gaming regulators or licensing authorities
• Investigate suspected illegal activity, fraud, or money laundering
• Protect the rights, property, or safety of bpo77, our users, or the public
• Enforce our Terms and Conditions or defend against legal claims

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy proceeding involving bpo77, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership and provide you with choices regarding your data if required by applicable law.

5.4 With Your Consent

We may share your information with other third parties when you have provided explicit consent for such disclosure, such as participating in third-party promotions or integrating external services with your account.

6. Data Security Measures

bpo77 employs industry-leading security technologies and practices to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security measures include:

6.1 Encryption and Secure Transmission

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade 256-bit Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols. This ensures that sensitive information such as passwords, financial data, and identity documents cannot be intercepted by third parties during transmission.
• HTTPS Protocol: Our entire Platform operates over HTTPS, providing end-to-end encryption for all user sessions.

6.2 Data Storage Security

• Encrypted Databases: All personal data stored on our servers is encrypted at rest using advanced encryption algorithms. Encryption keys are managed securely and rotated regularly.
• Secure Data Centers: Our servers are hosted in ISO 27001-certified data centers with physical security controls including 24/7 surveillance, biometric access restrictions, fire suppression systems, and redundant power supplies.
• Network Segmentation: Sensitive databases are isolated on separate network segments with strict firewall rules to limit access to authorized systems only.

6.3 Access Controls and Authentication

• Role-Based Access Control (RBAC): Internal access to personal data is restricted based on job function and necessity. Only authorized employees with legitimate business needs can access user information.
• Multi-Factor Authentication (MFA): Administrative accounts require multi-factor authentication to prevent unauthorized access.
• Password Security: User passwords are hashed using strong one-way cryptographic algorithms (bcrypt or Argon2) with unique salts, making it computationally infeasible to reverse-engineer plaintext passwords.

6.4 Security Monitoring and Incident Response

• 24/7 Security Monitoring: Our security operations center monitors platform activity around the clock to detect and respond to potential threats.
• Intrusion Detection Systems (IDS): Automated systems alert our security team to suspicious activity, unauthorized access attempts, and anomalous behavior.
• Regular Security Audits: We conduct quarterly internal security reviews and engage independent third-party security firms to perform annual penetration testing and vulnerability assessments.
• Incident Response Plan: We maintain a documented incident response plan to contain, investigate, and remediate security breaches promptly. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable data protection laws.

6.5 Employee Training and Policies

• All bpo77 employees and contractors undergo mandatory data protection training and sign confidentiality agreements.
• Our internal policies govern data handling practices, including secure disposal of outdated records and prohibition of unauthorized data sharing.

Important Security Reminder: While we implement robust security measures, no system is entirely immune to threats. You play a critical role in protecting your account by creating a strong password, keeping your credentials confidential, logging out after each session, and promptly reporting suspicious activity to our support team.

7. Data Retention Period

bpo77 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Active Account Data

While your account remains active, we retain all account information, transaction history, bet records, and communication logs to provide continuous service and maintain historical records for your reference.

7.2 Closed Account Data

If you close your account voluntarily or if we terminate your account for terms violations, we will retain certain data for the following periods:

• Financial Records: Deposit, withdrawal, and transaction records are retained for a minimum of 7 years to comply with anti-money laundering regulations and tax reporting requirements.
• Identity Documents: KYC documents are retained for 7 years after account closure for regulatory compliance and fraud prevention purposes.
• Bet History: Game outcomes, bet placements, and winnings are retained for 7 years to resolve potential disputes and regulatory inquiries.
• Communication Records: Customer support correspondence is retained for 3 years to improve service quality and resolve escalated complaints.
• Marketing Data: If you consented to marketing communications, your contact details are retained until you withdraw consent or for 2 years after your last account activity, whichever is earlier.

7.3 Legal Holds

In cases where your data is subject to legal proceedings, regulatory investigations, or unresolved disputes, we may retain relevant information beyond standard retention periods until the matter is conclusively resolved.

7.4 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data. bpo77 respects these rights and provides mechanisms for you to exercise them:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To access your data, log into your account and navigate to account settings, or contact our Data Protection Officer. We will provide the requested information in a structured, commonly used, and machine-readable format within 30 days.

8.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your account settings. For changes to identity documents or financial records, contact customer support with supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent. However, we may be legally required to retain certain information for regulatory compliance, fraud prevention, or dispute resolution. We will inform you if we cannot fully comply with a deletion request and explain the legal basis for retention.

8.4 Right to Restrict Processing

You may request that we limit how we use your personal data if you contest the accuracy of the data, object to processing, or believe we no longer need the data but you require it for legal claims.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider where technically feasible.

8.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications by adjusting your notification preferences in account settings or clicking "unsubscribe" links in our emails.

8.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your request. We may ask you to verify your identity before processing requests to prevent unauthorized access to your data. We aim to respond to all requests within 30 days.

9. Cookies and Tracking Technologies

bpo77 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content.

9.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They enable websites to remember your preferences, recognize you on return visits, and track your activity across pages.

9.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including user authentication, session management, and security features. These cookies cannot be disabled without impairing core services.
• Performance Cookies: Collect anonymous information about how users interact with the Platform, including pages visited, error messages encountered, and load times. This helps us optimize performance.
• Functional Cookies: Remember your preferences such as language selection, username, and display settings to provide a personalized experience.
• Analytics Cookies: Help us understand user behavior patterns, popular games, and feature usage to improve our Services. We use Google Analytics and similar tools for this purpose.
• Advertising Cookies: Track your activity to deliver relevant promotional offers. These cookies are only used if you have consented to marketing communications.

9.3 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though doing so may affect platform functionality. To learn how to manage cookies in your specific browser, consult your browser's help documentation.

10. Children's Privacy Protection

bpo77 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process requires date of birth verification, and all accounts undergo mandatory KYC identity verification to confirm age eligibility.

If we discover that we have inadvertently collected personal data from a person under 21, we will immediately delete the information, terminate the account, void all bets, and confiscate any funds or winnings without exception.

Parents and guardians are encouraged to monitor their children's internet usage and prevent minors from accessing online gambling platforms. If you believe a minor has created an account on bpo77, please contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

bpo77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Notify you via email or prominent notice on the Platform
• Provide a reasonable period for you to review the changes before they take effect

Your continued use of the Platform after the effective date of the revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must discontinue use of our Services and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected] (mark subject line "Privacy Inquiry" for priority handling)
• Live Chat: Available 24/7 through the Platform for immediate assistance
• WhatsApp Support: Text-based support for data protection inquiries

Our Data Protection Officer will respond to all inquiries within 5 business days. For complex requests such as data access or deletion, we aim to provide a substantive response within 30 days.