laku77 Privacy Policy

laku77 is committed to protecting the privacy and personal data of all users who access our platform. We recognize that you entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Privacy Policy has been designed to provide you with complete transparency about our data collection and processing practices, and to inform you of your rights under applicable data protection legislation.

This Policy complies with the data protection principles set out in the General Data Protection Regulation (GDPR), despite Indonesia not being an EU member state, because laku77 believes that GDPR-aligned standards represent best practice for user privacy protection globally. Where Indonesian data protection law imposes stricter requirements, we adhere to those local standards.

For the purposes of applicable data protection law, laku77 acts as the "data controller" in relation to your personal data. This means that laku77 determines the purposes for which and the manner in which your personal data is processed.

If you have any questions or concerns about how your personal data is handled, or if you wish to exercise any of your data protection rights, you may contact laku77's Data Protection Officer at:

• Email: [email protected] (with subject line: "Data Protection Enquiry")
• Postal Address: laku77 Data Protection Officer, c/o Registered Office Address (available upon request)

laku77 collects various categories of personal data depending on how you interact with our platform. The data we collect falls into the following categories:

3.1 Account Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Indonesian Rupiah / IDR)

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, we collect:

• Copies of government-issued identification documents (Indonesian KTP or passport)
• Proof of address documentation (utility bills, bank statements, or other official correspondence)
• Selfie photographs for biometric identity verification (where applicable)

3.3 Financial and Payment Data

• Bank account details (account holder name, bank name, account number) for deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or BSI
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay account details)
• Transaction history (deposit amounts, withdrawal requests, timestamps, processing status)
• Payment verification screenshots or documents submitted by you to confirm payment method ownership

3.4 Betting and Gaming Activity Data

• Betting history (wagers placed, stake amounts, markets selected, odds accepted, bet outcomes)
• Game session logs (slots played, casino games entered, session duration, win/loss records)
• Bonus utilization records (bonuses claimed, rollover progress, wagering contributions)
• Account balance snapshots and wallet transaction logs

3.5 Technical and Device Data

We automatically collect certain technical information when you access laku77:

• IP address and geolocation data (to verify jurisdiction eligibility)
• Device type, operating system, browser type and version
• Screen resolution, device identifiers (e.g., mobile advertising ID)
• Referring website URL, pages visited, click paths, time spent on pages
• Cookies and similar tracking technologies (see Clause 8 for full details)

3.6 Communications and Support Data

• Records of all live chat conversations with laku77 support agents
• Email correspondence, WhatsApp messages, and in-app message history
• Feedback, complaints, or enquiries submitted through contact forms
• Call recordings (if telephone support is introduced in the future; users will be notified at the start of any recorded call)

laku77 processes your personal data for the following specific purposes:

Under GDPR-aligned data protection principles, laku77 must have a lawful basis for processing your personal data. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under the Terms & Conditions (account management, transaction processing, game operations).
• Legal Obligation: Processing is necessary to comply with legal requirements, including KYC/AML regulations, tax reporting, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for laku77's legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and customer support — provided these interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your consent (e.g., for marketing communications or optional data collection), you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

laku77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we do share your data with certain trusted third parties in the following limited circumstances:

6.1 Service Providers and Processors

We engage third-party service providers to perform specific functions on our behalf. These providers process your data only on laku77's instructions and are contractually bound to maintain confidentiality and security. Examples include:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported payment methods.
• KYC/AML Verification Providers: To verify your identity documents, perform age checks, and screen against sanctions lists and politically exposed persons (PEP) databases.
• Cloud Hosting and Infrastructure Providers: To host laku77's platform, databases, and backup systems on secure servers.
• Customer Support Software Providers: To manage live chat, email ticketing, and support workflow systems.
• Marketing and Analytics Platforms: To send promotional emails (if you have opted in) and to analyze aggregated, anonymized user behavior data for platform optimization.

6.2 Regulatory and Legal Authorities

laku77 may disclose your personal data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities when:

• Required by applicable law, regulation, or legal process (e.g., court order, subpoena);
• Necessary to comply with our gaming license obligations and regulatory reporting requirements;
• Reasonably necessary to detect, prevent, or address fraud, security breaches, or other illegal activity;
• Required to protect the rights, property, or safety of laku77, our users, or the public.

6.3 Business Transfers

In the event that laku77 undergoes a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections outlined in this Policy.

laku77 employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and laku77's servers is encrypted using SSL/TLS 256-bit encryption. Sensitive data stored in our databases (such as passwords) is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized laku77 employees and contractors who require access to perform their job functions, and is granted on a need-to-know basis. All personnel with access to personal data are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts to add an additional layer of login security.
• Regular Security Audits: laku77's infrastructure undergoes regular third-party security audits, penetration testing, and vulnerability assessments to identify and remediate potential weaknesses.
• Incident Response Plan: In the event of a data breach affecting your personal data, laku77 will notify you and relevant regulatory authorities in accordance with applicable data breach notification laws.

laku77 uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content. A "cookie" is a small text file stored on your device by your web browser.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the platform — these enable you to log in, navigate the site, and use core features. You cannot opt out of these cookies as they are required for platform functionality.
• Performance and Analytics Cookies: Collect anonymized data about how users interact with laku77, such as pages visited, time spent on the platform, and click behavior. This data helps us identify technical issues and optimize user experience.
• Functional Cookies: Remember your preferences (e.g., language settings, username for auto-fill) to provide a more personalized experience.
• Marketing Cookies: Track your activity across the laku77 platform to deliver targeted promotional offers and measure the effectiveness of marketing campaigns. These cookies require your consent and can be disabled via your browser settings.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies that have already been set. However, disabling cookies may affect the functionality of the laku77 platform and prevent you from accessing certain features.

For more information on how to manage cookies in popular browsers, visit:

• Google Chrome: chrome://settings/cookies
• Mozilla Firefox: about:preferences#privacy
• Safari: Preferences > Privacy
• Microsoft Edge: edge://settings/privacy

laku77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are as follows:

After the applicable retention period expires, your personal data will be securely deleted or anonymized such that it can no longer be associated with you.

Under GDPR-aligned data protection principles, you have the following rights with respect to your personal data held by laku77:

• Right to Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was collected, or when you withdraw consent. Please note that we may be required to retain certain data to comply with legal obligations.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of disputed data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, or where processing is for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory data protection authority if you believe laku77 has violated your data protection rights.

How to Exercise Your Rights

To exercise any of the above rights, please contact laku77's Data Protection Officer at [email protected] with the subject line "Data Protection Rights Request". We will respond to your request within 30 calendar days. Proof of identity may be required to process your request.

laku77's services are strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a user is under 21, we will immediately suspend the account, void all transactions, and delete the associated personal data.

If you are a parent or guardian and believe that your child has provided personal data to laku77, please contact us immediately at [email protected] so that we can take appropriate action.

laku77 primarily serves players in Indonesia. However, some of our service providers (such as cloud hosting providers and payment processors) may be located outside Indonesia, including in jurisdictions that may not provide the same level of data protection as Indonesian or EU law.

Where we transfer your personal data to countries outside the European Economic Area (EEA) or to countries not recognized as providing adequate data protection, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules where the recipient is part of a multinational group with approved BCRs;
• Data Processing Agreements that contractually require the recipient to provide equivalent data protection to that required under GDPR.

If you would like more information about the safeguards we have in place for international data transfers, please contact us at [email protected].

laku77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes to this Policy, we will notify you by:

• Displaying a prominent notice on the laku77 platform upon your next login;
• Sending an email notification to the address registered on your account; and/or
• Updating the "Effective Date" displayed at the top of this Policy.

Your continued use of laku77's services following notification of a Privacy Policy update constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data protection rights, please contact laku77's Data Protection Officer through the following channels:

laku77 aims to respond to all data protection enquiries within 30 calendar days of receipt. Complex requests may require additional time, in which case we will inform you of the delay and the expected resolution timeframe.