arab77 Privacy Policy

1. Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "arab77," "we," "us," "our" — refers to the operator of https://arab77.cam and all associated services.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, email address, phone number, national ID number, financial data, and IP address.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" — arab77, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of arab77 under a data processing agreement.
• "Player" / "User" / "you" — any individual who creates an account, visits, or uses the arab77 platform.
• "KYC" — Know Your Customer identity verification procedures required by our licensing and anti-money laundering obligations.
• "Cookies" — small text files stored on your device that help us deliver and improve our services.

2. Personal Data We Collect

arab77 collects only the data that is necessary and proportionate for the purposes described in this policy. The categories of personal data we hold include:

2.1 Identity and Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Indonesian national identity card number (KTP) or passport number
• Residential address (including city, province, and postal code in Indonesia)
• Email address and mobile phone number

2.2 Financial Data

• Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) for deposits and withdrawals
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history (deposit amounts, withdrawal requests, bonus usage)
• Betting history and wagering records

2.3 Technical and Usage Data

• IP address, device type, operating system, and browser type
• Login timestamps and session duration
• Pages visited, game preferences, and feature interactions
• Geolocation data (city-level, derived from IP address)

2.4 Verification Documents (KYC)

• Copy of government-issued photo ID (KTP, passport, or SIM)
• Proof of address (utility bill, bank statement issued within 3 months)
• Identity selfie (photo of the player holding their ID document)
• Source of funds documentation (for high-value transactions, where required)

2.5 Communications Data

• Support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Bonus and promotion opt-in preferences

3. How We Collect Your Data

We gather personal data through several channels, all of which are described transparently below:

3.1 Directly From You

Most of the personal data we hold is provided by you directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey. This direct collection is the primary source of your identity and financial data.

3.2 Automatically Via Technology

When you visit our website or use our platform, our servers automatically record technical data such as your IP address, browser type, device identifier, and session activity. This data is collected via cookies, server logs, and analytics tools to help us maintain platform security, diagnose technical issues, and understand how players use our services.

3.3 From Third-Party Verification Services

To fulfill our KYC and anti-money laundering obligations, we may receive identity verification data from licensed third-party KYC providers. These providers cross-reference the documents you submit against authoritative identity databases to confirm authenticity.

3.4 From Payment Processors

When you make a deposit or withdrawal, our payment processing partners (including local bank gateways supporting BCA, BRI, BNI, Mandiri, and e-wallet operators such as OVO and DANA) may share transaction confirmation data, which we record against your account.

4. How We Use Your Personal Data

The table below provides a clear overview of the purposes for which arab77 processes your data and the corresponding legal basis for each activity:

We do not use automated decision-making or profiling in any way that produces legally significant effects on your account status, except where required by AML regulations and where appropriate safeguards are in place.

5. Legal Basis for Processing

arab77 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing is required to fulfill our obligations under the Terms & Conditions you accepted when registering an account — including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Certain processing activities are mandated by our international licensing requirements, anti-money laundering regulations, and KYC obligations. We have no discretion to opt out of these requirements.
• Legitimate Interests: We process some data on the basis of our legitimate business interests — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: For optional activities such as receiving promotional emails or SMS notifications, we rely on your explicit consent. You can withdraw consent at any time by contacting our support team or adjusting your account communication preferences.

6. Data Sharing and Disclosure

arab77 does not sell or rent your personal data to third parties. We may, however, share data in the following limited and controlled circumstances:

6.1 Regulated Service Providers

We engage carefully selected third-party processors who assist us in delivering our services. All processors operate under binding data processing agreements that restrict how they use your data. These include:

• KYC and identity verification providers
• Payment gateway operators (supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other local payment rails)
• Game technology providers (Pragmatic Play, Evolution Gaming, Spribe, and others) for game functionality and RNG auditing
• Fraud detection and cybersecurity service providers
• Cloud hosting and infrastructure providers

6.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement, regulatory bodies, or government authorities when required by law, court order, or our international licensing obligations. We will notify you of any such disclosure unless we are legally prohibited from doing so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer, and the acquiring entity will be bound by terms that protect your data no less stringently than this policy.

6.4 With Your Explicit Consent

We may share your data with third parties in other circumstances only where you have provided your explicit, informed consent for that specific sharing purpose.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and our licensing obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and analytics purposes.

8. Data Security Measures

arab77 maintains a comprehensive information security program designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and our servers
• AES-256 encryption for all personal data stored in our databases
• Role-based access controls (RBAC) ensuring staff can only access data relevant to their job function
• Multi-factor authentication (MFA) for all internal system access by arab77 personnel
• Regular third-party penetration testing and security audits by independent cybersecurity firms
• 24/7 automated intrusion detection and real-time alerting on suspicious system activity
• Geographic redundancy with encrypted backups stored in separate secure data centers
• Staff training on data protection best practices, conducted at onboarding and annually thereafter

In the event of a data breach that is likely to affect your rights or interests, we will notify you and the relevant authorities within 72 hours of becoming aware of the incident, in accordance with our licensing obligations.

9. Cookies and Tracking Technologies

arab77 uses cookies and similar technologies to deliver, maintain, and improve our platform. Cookies are small text files placed on your device when you visit our website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for core platform functionality — including login sessions, account security tokens, and CSRF protection. These cannot be disabled without breaking the platform.
• Performance and Analytics Cookies: Help us understand how players navigate and use our platform, enabling us to identify and fix issues and optimize the user experience. Data collected is aggregated and anonymized.
• Functional Cookies: Remember your preferences (such as language settings, display preferences, and last-visited game categories) to personalize your experience across sessions.
• Session Integrity Cookies: Detect and prevent fraudulent logins, account takeover attempts, and multi-account abuse by verifying consistent session characteristics.

9.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Detailed cookie management instructions are available in the help section of your browser's settings menu.

10. Your Privacy Rights

As a user of arab77, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team using the details in Section 13:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how and why we use it.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. You can update most account information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where we no longer have a legitimate legal or operational reason to retain it. Note that regulatory retention obligations (Section 7) may prevent immediate deletion of some data categories.
• Right to Data Portability: You may request an export of your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to Restrict Processing: In certain circumstances (such as during a dispute about data accuracy), you may request that we limit how we use your data while the matter is resolved.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we rely on consent for processing (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your withdrawal.

We will respond to all data rights requests within 30 calendar days. In complex cases, we may extend this to 60 days, and will notify you accordingly. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive.

11. Minors and Age Restriction Policy

arab77 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and KYC procedures include confirmation of date of birth against government-issued documents.

If we discover that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, void all transactions, and delete the personal data in question. If you are a parent or guardian and believe your child has registered on our platform, please contact us immediately at the details provided in Section 13.

12. Changes to This Privacy Policy

arab77 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on our platform for a minimum of 14 days
• Where appropriate, send an email notification to registered players

Your continued use of the arab77 platform after the effective date of any changes constitutes acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us and Data Requests

If you have questions, concerns, or requests relating to this Privacy Policy or how arab77 handles your personal data, our Data Protection team is available to assist you.