Privacy Policy

aos77 operates Indonesia's premier online casino and sportsbook platform at https://aos77.one. As part of delivering a secure, fair, and personalized gaming experience to our players, we necessarily process certain personal data. This Privacy Policy sets out a transparent and comprehensive account of our data practices in plain English, so you always know exactly where you stand.

We are committed to handling your personal data with integrity, processing it only for the purposes described in this policy, and retaining it only for as long as is necessary or required by applicable obligations. We do not sell your personal data to third parties for commercial marketing purposes, and we will never use your data in a manner inconsistent with the purposes stated here without first obtaining your explicit consent.

This policy applies to all personal data collected through the aos77 website, mobile browser interface, customer support channels, promotional communications, and any other interaction you have with the aos77 platform or brand.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the entity operating the aos77 platform. As the data controller, aos77 determines the purposes for which and the means by which your personal data is processed.

If you have any questions about how aos77 processes your data, wish to exercise any of your rights described in Clause 11, or wish to submit a data-related complaint, please contact our dedicated Data Protection contact as described in Clause 15 of this policy.

aos77 collects the following categories of personal data from players and visitors. We collect only the data that is necessary for the purposes described in Clause 5.

aos77 collects personal data through the following channels:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP address, device identifiers, browser metadata, and session activity, via server logs and analytics tools.
• Cookies and Tracking Technologies: Data collected passively through first-party cookies, session storage, and similar technologies as described in Clause 8.
• Third-Party Identity Verification Providers: During KYC, identity data may be cross-referenced with third-party identity verification services to confirm document authenticity. These providers operate under strict data processing agreements with aos77.
• Payment Processors: Transaction confirmation data is received from Indonesia's local bank networks and e-wallet platforms (such as OVO, DANA, GoPay, ShopeePay, and LinkAja) to reconcile deposits and withdrawals. Full payment credentials are never stored on aos77 servers.
• Game Content Providers: Gaming activity logs and session data are received from certified third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — in order to maintain accurate bet histories and resolve disputes.

We process your personal data only where we have a lawful basis for doing so. The table below sets out our primary processing purposes and the corresponding legal basis for each:

Where we rely on consent as the legal basis (for example, for marketing communications), you may withdraw your consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

aos77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account Data (Identity & Contact): Retained for the lifetime of the active account, plus a minimum of five (5) years following account closure. This retention period supports anti-money-laundering compliance and the resolution of any post-closure disputes.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with internationally recognized anti-money-laundering record-keeping standards.
• KYC Documentation: Identity documents submitted for KYC are retained for the period required by the applicable regulatory framework, but no longer than ten (10) years from the date of submission unless a specific legal obligation requires extended retention.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each session or transaction, for the purposes of dispute resolution, responsible gaming monitoring, and fraud detection.
• Customer Support Records: Live chat transcripts, email correspondence, and support ticket records are retained for three (3) years from the date of the last interaction, unless the content relates to an unresolved dispute.
• Cookies and Technical Data: Session cookies are deleted when you close your browser. Persistent analytics cookies expire in accordance with the cookie settings described in Clause 8, typically within 12 months.
• Marketing Preferences: Records of your marketing consent or opt-out are retained indefinitely to ensure compliance with your stated preferences.

When data is no longer required and no legal obligation requires its retention, it is securely deleted or anonymized so that it can no longer be associated with your identity.

aos77 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Game Content Providers: Gaming session data and bet histories are shared with our certified game studio partners — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — solely for the purpose of delivering game functionality, maintaining bet records, and resolving game-related disputes. These providers act as data processors under contractual data processing agreements.
• Payment and Banking Partners: Financial data necessary to process a specific transaction is shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of completing that transaction. We do not share your full account profile with payment providers.
• Identity Verification Services: During KYC, identity documents and personal identifiers may be shared with third-party identity verification providers for document authenticity checks. These providers are contractually bound to use the data only for verification purposes.
• Fraud Detection and Security Partners: Technical data including IP addresses and device fingerprints may be shared with specialized fraud prevention vendors to detect and prevent unauthorized access, multi-accounting, and financial crime.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a lawful legal obligation, valid court order, or regulatory directive. We will notify affected players of such disclosures where legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, or sale of business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to data processing arrangements.

aos77 uses cookies and similar tracking technologies to operate the platform effectively, remember your session and preferences, analyze platform usage, and detect fraud. The following cookie categories are in use:

Strictly necessary cookies are essential to the operation of the platform and cannot be disabled without impairing core functionality. All other cookie categories can be managed through your browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy or settings menu. Note that disabling functional cookies may affect your ability to use certain platform features, such as remembered login sessions.

aos77 does not use third-party advertising or retargeting cookies. We do not participate in cross-site tracking networks or behavioral advertising programs.

aos77 implements a layered security architecture designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the aos77 platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by Indonesia's leading financial institutions including BCA and Mandiri.
• Encrypted Data Storage: Sensitive personal data stored on aos77 servers — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. aos77 staff are granted only the minimum level of data access required to perform their specific job functions. All internal data access is logged and audited.
• Multi-Factor Authentication: Critical administrative systems are protected with multi-factor authentication. Player accounts support OTP verification to prevent unauthorized access.
• Penetration Testing and Security Audits: The aos77 platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that poses a risk to player rights, aos77 will notify affected players and the appropriate authorities within the timeframe required by applicable regulations.

While aos77 implements robust security measures, no platform can guarantee absolute security against all possible threats. Players are responsible for maintaining the security of their own login credentials and must not share their username, password, or OTP codes with any third party.

As an internationally licensed platform serving Indonesian players, certain personal data may be transferred to, stored in, or processed in jurisdictions outside of Indonesia. This may occur, for example, when data is processed by our game studio partners or identity verification providers whose technical infrastructure is hosted in other countries.

• aos77 ensures that any international transfer of personal data is subject to appropriate safeguards — including contractual data processing agreements that impose data protection obligations at least equivalent to those described in this Privacy Policy.
• We do not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing appropriate transfer mechanisms.
• All third-party data processors who receive data outside of Indonesia are contractually prohibited from using that data for any purpose other than the specific service they provide to aos77.

As a player on the aos77 platform, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting us as described in Clause 15:

We will respond to all valid data rights requests within 30 days of receipt. In complex cases, the response period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. Exercising your rights is free of charge. We may decline requests that are manifestly unfounded or excessive, in which case we will provide written reasons for the refusal.

The aos77 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. All account registrations require date-of-birth confirmation, and KYC verification includes age verification against a government-issued identity document.

• If aos77 discovers that a player has provided a false date of birth and is under 21 years of age, the account will be immediately suspended, all deposits will be returned, and any winnings will be forfeited.
• Any personal data collected from a minor as a result of age misrepresentation will be deleted as soon as the error is identified.
• If you are a parent or guardian and believe that a minor has registered an account on the platform using false information, please contact our support team immediately at [email protected] so that we can take prompt corrective action.

The aos77 platform may contain links to or integrations with third-party services, including game studios and payment providers. This Privacy Policy applies solely to data processed by aos77. When you interact with a third-party service — including clicking through to a game provider's external help page or completing a transaction with an e-wallet provider such as OVO, DANA, or GoPay — that third party's own privacy policy governs the data they collect.

aos77 is not responsible for the privacy practices of third-party services and encourages you to review the relevant privacy documentation before providing personal data to any external platform. Our contractual agreements with game content providers and payment processors do impose data protection obligations on those parties with respect to data received from aos77, but we cannot control how those parties process data collected independently through their own interfaces.

aos77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or platform operations. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the platform informing players of the update.
• Where required by the nature of the change, notify affected players directly via their registered mobile number or contact information.

Your continued use of the aos77 platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with a material change to this policy, you may close your account and request deletion of your data in accordance with Clause 11, subject to applicable legal retention obligations.

We encourage all players to review this Privacy Policy periodically to stay informed about how aos77 protects and manages their personal data.

If you wish to exercise any of your data rights described in Clause 11, have a question about this Privacy Policy, or wish to raise a data protection concern, please contact the aos77 support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from any page on the platform. Indonesian-speaking agents are available at all times. Average first-response time is under two minutes.
• Email: [email protected] — for data rights requests, please include "Data Rights Request" in the subject line. We aim to respond within one business day and will confirm receipt of your request promptly.

We take all privacy-related concerns seriously and will investigate every complaint thoroughly. If you are not satisfied with our response to a data-related complaint, you have the right to escalate the matter to the relevant regulatory authority or, where applicable, to seek independent dispute resolution.

For responsible gaming concerns — including requests for deposit limits, cooling-off periods, or self-exclusion — please visit our dedicated Responsible Gaming page or contact live chat directly.