Privacy Policy

01 Introduction

wira77 ("we", "us", "the Operator", "the Platform") is committed to protecting the privacy and personal data of every Member who uses our online casino and sports betting services. This Privacy Policy sets out in clear, transparent terms how we collect, use, store, share, and protect your personal information, and explains the rights available to you as a data subject.

wira77 operates primarily in the Indonesia market, serving Indonesian players who bet on sports including BRI Liga 1 football, global leagues such as the EPL, La Liga, and Bundesliga, as well as casino games, togel (Indonesia's traditional numbers lottery), and other gaming products. The personal data we process is necessary for the delivery of these services, for compliance with applicable international gaming regulations, and for the prevention of fraud and financial crime.

We process personal data in accordance with internationally recognized data protection principles, including purpose limitation, data minimization, accuracy, storage limitation, and integrity and confidentiality. This policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

03 Data We Collect

wira77 collects personal data across several categories, depending on the nature of your interaction with the Platform:

3.1 Identity Data

• Full legal name as it appears on your Indonesian National ID (KTP) or other government-issued identification
• Date of birth
• Gender (where provided)
• Nationality and country of residence
• KTP number or other government ID number
• Photographs submitted for KYC verification (including selfie with ID)

3.2 Contact Data

• Email address
• Mobile phone number (Indonesian format, e.g., +62 prefix)
• Residential address in Indonesia or other permitted jurisdiction

3.3 Financial Data

• Bank account name, number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon)
• E-wallet account identifier (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history (deposits, withdrawals, bet settlements) in Indonesian Rupiah (IDR)
• Source of funds declarations where required by AML procedures

3.4 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Unique device identifiers
• Session timestamps and duration
• Referring URL and exit pages

3.5 Behavioral & Gaming Data

• Betting history, game preferences, and wagering patterns
• Bonus claim and wagering requirement completion records
• Responsible gaming settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records and chat transcripts

3.6 Communications Data

• Records of emails, live chat sessions, and support tickets exchanged with wira77
• Marketing preference settings and opt-in/opt-out history
• Feedback and survey responses where voluntarily submitted

04 How Data Is Collected

wira77 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or submitting feedback.
• Automated collection: Technical and behavioral data collected automatically when you access and interact with the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity and fraud-risk data received from our KYC verification partners, payment processors (including local Indonesian bank gateways and e-wallet providers), and fraud prevention services. We may also receive data from publicly available sources to verify the accuracy of information you have provided.
• Referred registrations: If you register via an affiliate or partner referral link, wira77 will receive confirmation of the referral source. No additional personal data beyond what you directly provide is shared by the referring party.

05 Purposes of Processing

wira77 processes your personal data for the following specific, defined purposes:

06 Legal Basis for Processing

wira77 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the contract between wira77 and the Member (e.g., account creation, payment processing, bet settlement).
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and record-keeping mandates under our gaming license.
• Legitimate interests: Processing necessary for wira77's legitimate business interests, including fraud prevention, platform security, abuse detection, and analytics, where such interests are not overridden by the Member's fundamental rights and freedoms.
• Consent: Processing for optional purposes where you have given explicit consent, such as receiving marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

07 Data Sharing

wira77 does not sell or rent your personal data. We may share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Payment Processors

To facilitate deposits and withdrawals, wira77 shares relevant financial and identity data with our payment processing partners, including local Indonesian bank gateway providers (supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors are bound by data processing agreements and may only use your data for the specific purpose of completing your transaction.

7.2 KYC and Identity Verification Partners

Identity documents and selfie verification photographs are processed by our third-party KYC service providers for the purpose of confirming your identity and age. These providers operate under strict confidentiality obligations and international data security standards.

7.3 Fraud Prevention and AML Services

wira77 may share transactional and behavioral data with specialist fraud prevention and AML monitoring services to identify suspicious activity, prevent financial crime, and comply with our regulatory obligations. Data shared for this purpose is limited to what is strictly necessary for risk assessment.

7.4 Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive a Member's account identifier and session token to authenticate and deliver game sessions. These providers do not receive your full identity or financial data.

7.5 Legal and Regulatory Disclosure

wira77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or lawful regulatory direction. Where permitted, wira77 will notify the affected Member of any such disclosure request.

7.6 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of wira77's business assets, personal data may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and the identity of the new data controller via the registered email address.

08 International Data Transfers

wira77 operates internationally and your personal data may be processed in countries outside Indonesia. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that applicable in Indonesia, wira77 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with third-party processors
• Binding corporate rules where applicable within our corporate group
• Transfers to jurisdictions recognized as providing adequate data protection by applicable international standards

By registering an account with wira77, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia where necessary for the delivery of our services, provided that such transfers are governed by the safeguards described above.

09 Data Retention

wira77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be attributed to an identifiable individual. Anonymized aggregate data may be retained indefinitely for statistical and analytical purposes.

10 Cookies & Tracking Technologies

wira77 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyze how Members interact with our services. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They enable core functionalities such as session authentication, security token validation, and load balancing. No personal data beyond session identifiers is stored by these cookies.

10.2 Functional Cookies

These cookies remember your preferences — such as preferred language, display settings, and last-used payment method (e.g., BCA or OVO) — to provide a more personalized experience on return visits.

10.3 Analytics Cookies

wira77 uses analytics tools to understand how Members navigate the Platform, which pages are most visited, where sessions originate, and what features are most frequently used. Analytics data is aggregated and does not identify individual users by name. You may opt out of analytics cookies without affecting your ability to use the Platform.

10.4 Marketing Cookies

With your consent, wira77 may use marketing cookies to deliver relevant promotional content and to track the effectiveness of our campaigns. Marketing cookies are only activated if you have opted in to marketing communications. You may withdraw consent at any time by contacting support.

11 Security Measures

wira77 implements comprehensive technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and wira77 servers
• AES-256 encryption at rest for sensitive data fields including identity documents and financial account details
• Two-factor authentication (2FA) available to all Members for account login
• Role-based access controls ensuring that wira77 staff can only access personal data relevant to their specific job function
• Regular third-party penetration testing and vulnerability assessments of Platform infrastructure
• Intrusion detection systems monitoring for anomalous access patterns in real time
• Incident response protocols including procedures for notifying affected Members in the event of a data breach that poses a risk to their rights and freedoms

Despite these measures, no data transmission over the internet or method of electronic storage is completely secure. wira77 cannot guarantee absolute security and Members are encouraged to use strong, unique passwords and to enable 2FA on their accounts.

In the event of a data breach materially affecting your personal data, wira77 will notify you via your registered email address within 72 hours of becoming aware of the breach, to the extent technically and operationally feasible.

12 Your Data Rights

As a data subject, you hold the following rights with respect to the personal data wira77 processes about you. wira77 will respond to verified data rights requests within 30 calendar days of receipt.

To exercise any of the above rights, contact the wira77 Data Protection team at [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request to prevent unauthorized access to another person's data.

13 Minors

The wira77 Platform is strictly restricted to individuals aged 21 years and above. wira77 does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately close the associated account, delete the data to the extent legally permissible, and retain a record of the incident for regulatory purposes.

If you have reason to believe that a minor has registered an account on the wira77 Platform, please contact our support team immediately at [email protected]. We take underage access extremely seriously and will investigate all reports promptly.

14 Third-Party Links

The wira77 Platform may contain links to third-party game provider interfaces or payment gateway pages. These third-party environments operate under their own privacy policies, which wira77 does not control. wira77 is not responsible for the privacy practices of any third-party service accessed via the Platform. We encourage Members to review the privacy policy of any third-party service before providing personal data to it.

15 Policy Amendments

wira77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or business operations. Where changes are material, we will provide not less than 7 days' advance notice via email to the registered account address or via a prominent notice on the Platform.

The "Last Updated" date at the top of this page indicates when the most recent revision took effect. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the Platform and close your account before the amendment's effective date.

16 Contact

If you have any questions about this Privacy Policy, wish to exercise a data right, or need to raise a privacy-related concern, please contact the wira77 Data Protection team using the details below:

wira77 is committed to resolving all privacy-related queries and complaints promptly and fairly. If you are not satisfied with the outcome of your inquiry, you may escalate the matter to the relevant data protection authority or dispute resolution body applicable under the laws of your jurisdiction.