mak77 Privacy
Policy

Definitions

Throughout this Privacy Policy, the following terms have the meanings assigned to them below.

• "mak77" / "we" / "us" / "our" — the online betting and gaming platform accessible at mak77.vip, operated under the mak77 brand.
• "Player" / "you" / "your" — any natural person who registers an account on, visits, or interacts with the mak77 platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, date of birth, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, transfer, and deletion.
• "KYC" — Know Your Customer, the identity verification process that mak77 conducts on registered players to comply with anti-money-laundering and age verification obligations.
• "Cookies" — small data files placed on your device by the mak77 platform to enable functionality, remember preferences, and support analytics.
• "Third-Party Processors" — external service providers who process personal data on mak77's behalf under contractual data protection obligations, including payment processors, game studios, and infrastructure providers.

Data Controller

mak77 acts as the data controller in respect of all personal data collected from players and visitors to the mak77 platform. As data controller, mak77 determines the purposes for which personal data is processed and the means by which that processing is carried out.

mak77 operates as an internationally licensed online gaming platform serving players primarily located in Indonesia. All data processing activities conducted by mak77 are carried out in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality.

Data We Collect

mak77 collects personal data across several categories, each serving a distinct operational purpose. The following table sets out the categories of personal data collected and a representative (non-exhaustive) list of specific data points within each category.

mak77 does not collect sensitive personal data such as biometric identifiers, political opinions, religious beliefs, or health data beyond what is strictly necessary for responsible gaming monitoring (e.g., recording a self-reported gambling problem for the purposes of activating a self-exclusion).

How Data Is Collected

mak77 collects personal data through the following channels and mechanisms:

• Direct submission: Data you enter into registration forms, KYC submission portals, deposit and withdrawal request forms, support contact forms, and account settings pages.
• Automated technical collection: Data collected automatically when you visit or use the mak77 platform, including IP address, device identifiers, browser characteristics, and session activity logs.
• Cookies and similar technologies: Data collected via cookies, web beacons, and local storage mechanisms placed on your device during platform use. See Section 11 (Cookies & Tracking) for full details.
• Third-party verification services: Data received from identity verification providers used to cross-check KYC documentation submitted during account verification.
• Payment processors: Confirmation data received from Indonesian bank payment gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) upon successful transaction processing.
• Game studio providers: Game session data received from certified studio partners (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe) including round outcomes, bet sizes, and session durations.

Purposes of Processing

mak77 processes personal data for the following specific, documented purposes. Data is not processed for any purpose incompatible with those listed below without your explicit consent or a clear legal basis for the additional processing.

• Account creation and management: Creating and maintaining your mak77 Account, including processing registration details, managing login credentials, and recording account status changes.
• Identity and age verification (KYC): Verifying that you are at least 21 years of age and confirming your identity as required under mak77's anti-money-launder ing obligations and responsible gaming commitments.
• Transaction processing: Facilitating deposits and withdrawals in Indonesian Rupiah (IDR) via local bank transfer and e-wallet channels, including verifying payment method ownership and detecting fraudulent transactions.
• Responsible gaming monitoring: Tracking betting patterns and session data to identify signs of problem gambling behaviour and to enforce any responsible gaming limits you have set on your account, such as deposit limits, loss limits, and session timers.
• Fraud prevention and security: Detecting and preventing unauthorised account access, multiple account registration, bonus abuse, and other forms of platform misuse using technical and behavioural data signals.
• Customer support: Responding to support tickets, live chat enquiries, and email correspondence, and maintaining records of those interactions for quality assurance and dispute resolution.
• Legal and regulatory compliance: Meeting mak77's obligations under applicable anti-money-laundering regulations, licensing conditions, and any lawful requests from competent authorities.
• Platform improvement: Analysing aggregated, anonymised behavioural data to improve game selection, platform performance, and user experience for Indonesian players.
• Marketing communications: Sending promotional emails, bonus notifications, and platform updates to players who have opted in to receive marketing communications. Players may opt out at any time via account settings or by contacting support.

Legal Basis for Processing

Every processing activity conducted by mak77 rests on one of the following recognised legal bases:

• Contractual necessity: Processing required to enter into or perform the player account agreement — including registration, KYC, deposits, withdrawals, and bet settlement. Without this processing, mak77 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, age verification requirements, financial record-keeping obligations, and lawful requests from competent authorities.
• Legitimate interests: Processing carried out for mak77's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and product improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

mak77 shares personal data only in the circumstances described below. We do not sell, rent, or trade personal data to any third party for commercial purposes.

• Payment processors and Indonesian banks: Financial data (including bank account details and transaction amounts in IDR) is shared with payment processing partners — including the gateways connecting to BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Identity documents submitted during KYC are processed by mak77's contracted identity verification partners. These providers act as data processors under binding contractual terms and are prohibited from using your data for any purpose other than verification.
• Game studio providers: Game session data is exchanged with certified studio partners (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe) to facilitate game delivery and settle real-money round outcomes. Studios receive only the minimum data necessary for game operation.
• IT infrastructure and cloud providers: Platform data is hosted and processed on secure server infrastructure operated by mak77's contracted cloud and hosting providers. These providers are bound by data processing agreements and may not use your data independently.
• Fraud detection and AML services: Technical data and transaction records may be shared with specialist anti-fraud and anti-money-laundering screening services to detect and prevent financial crime.
• Competent authorities: mak77 will disclose personal data to law enforcement, regulatory bodies, or other public authorities where required to do so by law, court order, or other binding legal process. mak77 will, where legally permitted, notify the affected player of any such request before disclosing data.

International Data Transfers

As an internationally operating platform, mak77 may transfer personal data to servers and processors located outside Indonesia. Where such international transfers occur, mak77 ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that applied within Indonesia.

Safeguards used for international transfers include: contractual data protection clauses incorporated into all third-party processor agreements; transfers only to jurisdictions with an established record of data protection compliance; and technical security measures (encryption in transit and at rest) applied to all transferred data regardless of destination.

Players may request information about the specific safeguards applied to any international transfer of their personal data by contacting [email protected].

Data Retention

mak77 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping obligations applicable to payment service activities.
• KYC documents: Retained for the duration of the account relationship and for five (5) years following account closure or the completion of the relevant KYC review, whichever is later.
• Game session and betting history: Retained for the duration of the account relationship and for two (2) years following account closure, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years from the date of each interaction, for quality assurance, training, and dispute resolution purposes.
• Marketing preference records: Retained for the duration of the active account and for two (2) years following account closure or opt-out, as evidence of consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

Security Measures

mak77 applies a layered set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the mak77 platform, including login sessions, deposit and withdrawal flows, and KYC document uploads.
• Encryption at rest for all stored personal data and financial records, using industry-standard encryption algorithms.
• Access controls limiting access to personal data to mak77 staff and processors who have a documented operational need for that access, enforced through role-based permission systems and multi-factor authentication for internal platform access.
• Audit logging of all access to personal data records, enabling detection of and response to unauthorised access attempts.
• Regular security assessments including vulnerability scanning and penetration testing of the mak77 platform infrastructure.
• Incident response procedures ensuring that any confirmed data breach affecting player personal data is assessed, contained, and — where required — reported to affected players promptly.

Cookies & Tracking Technologies

The mak77 platform uses cookies and similar technologies (including web beacons and local storage) to deliver core functionality, remember your preferences, support platform security, and — with your consent — analyse how the platform is used.

The following categories of cookies are used on mak77:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options to deliver a more personalised experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and use the mak77 platform — including which pages are visited most frequently and where users encounter errors — to help mak77 improve the platform. These cookies are only placed with your consent.
• Security and fraud detection cookies: Used to detect and prevent suspicious activity, including multiple account registration, automated bot access, and fraudulent login attempts.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your mak77 account and using real-money platform features. Disabling analytics cookies will not affect your ability to use the platform.

Your Rights

As a player whose personal data is processed by mak77, you have the following rights with respect to your data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request — [Your Username]". mak77 will respond to verified requests within 30 days.

Please note that certain rights are subject to limitations where mak77 is required to retain or continue processing data to comply with a legal obligation, to perform a contract with you, or to defend against a legal claim. Where a limitation applies, mak77 will explain the specific reason in its response to your request.

Minors

The mak77 platform is strictly intended for adults aged 21 and over. mak77 does not knowingly collect personal data from individuals under the age of 21. All registration applications are subject to age verification, and mak77 reserves the right to request documentary proof of age at any point during the account lifecycle.

If mak77 becomes aware that personal data has been collected from an individual under 21 — whether through a failed age verification check, a third-party report, or any other means — the affected account will be suspended immediately, all associated personal data will be deleted as soon as reasonably practicable, and any funds deposited to the account will be returned to the originating payment method following verification of the deposit source.

If you are a parent or guardian and believe that a minor in your care has registered an account on mak77, please contact [email protected] immediately. mak77 will treat such reports with the highest priority and take prompt action to close the account and delete the associated data.

Third-Party Services

The mak77 platform integrates with third-party services — including certified game studios, payment processors, and infrastructure providers — to deliver its full range of products to Indonesian players. While mak77 exercises due diligence in selecting and contracting these third parties, the privacy practices of those third parties in respect of data processed on their own platforms (outside of their role as mak77 processors) are governed by their own privacy policies.

mak77 is not responsible for the data practices of third-party websites or services that you access independently through links or integrations outside the direct mak77 platform environment. Players are encouraged to review the privacy policies of any third-party services they use in connection with their online betting activities.

Game studios certified to operate on mak77 — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe — are bound by contractual data protection obligations that restrict their use of player data to the specific purposes of game delivery and session management on the mak77 platform.

Policy Amendments

mak77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material — meaning they substantively affect how your personal data is collected, used, or shared — mak77 will provide at least 14 days' advance notice via a prominent notice on the mak77 platform and, where possible, by email to your registered address.

The effective date and version number at the top of this document will be updated with each revision. Continued use of the mak77 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you must stop using the platform and request account closure before the effective date of the change.

The current version of the mak77 Privacy Policy is always available at mak77.vip/privacy-policy. Players are encouraged to review this policy periodically, particularly following any notification of changes.

Contact & Complaints

For all privacy-related enquiries — including subject access requests, correction and deletion requests, consent withdrawal, data portability requests, and complaints about mak77's data processing practices — please contact the mak77 data protection team using the details below.

If you are dissatisfied with mak77's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. mak77 will cooperate fully with any regulatory investigation conducted in good faith.

For all other customer support matters — including account, deposit, withdrawal, and gaming queries — please contact [email protected] or use the 24/7 live chat feature on the mak77 platform. Indonesian-speaking agents are available during WIB peak hours.