This Privacy Policy explains what personal data sin77 collects from Members, how it is used, who it may be shared with, and what rights you hold over your own information. Please read it alongside our Terms & Conditions.
Six principles that underpin how sin77 approaches every aspect of member data — from collection to deletion.
sin77 collects only the personal data that is genuinely necessary for account management, payment processing, age verification, and regulatory compliance. We do not collect data speculatively or "just in case."
Every data transmission between your browser and sin77's servers is protected by industry-standard 256-bit SSL encryption. Sensitive fields — including KYC documents, bank details, and passwords — are encrypted at rest using AES-256.
sin77 does not sell, rent, or commercially transfer your personal data to any third party for marketing, advertising, or profiling purposes. Your data is used only to operate and improve the service you have subscribed to.
Every category of data collected by sin77 is listed in this Policy alongside its specific purpose. We do not use your data for any purpose not described here without first obtaining your explicit consent.
Members have the right to access, correct, or request deletion of their personal data. sin77 responds to all valid data rights requests within 30 days. See Clause 10 for the full list of rights and how to exercise them.
sin77 retains personal data only for as long as it is needed for its stated purpose or as required by applicable gaming licence obligations. Account data for closed accounts is retained for a maximum of 5 years for regulatory compliance, then permanently deleted.
This Privacy Policy applies to all personal data processed by sin77, accessible at https://sin77.cam, in connection with the operation of its online gaming platform, including all sub-domains, mobile interfaces, and related services (collectively, "the Platform").
sin77 acts as the data controller for the personal information you provide during registration, KYC verification, and ongoing use of the Platform. Where sin77 engages third-party processors — such as game studios, payment providers, or analytics tools — those processors operate under data processing agreements that bind them to the same confidentiality and security standards described in this Policy.
By registering an Account on sin77, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as set out herein. If you do not agree with any part of this Policy, you must not create an Account or use the Platform.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could be used to identify a living individual, including name, email address, phone number, date of birth, bank account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion. |
| "Member" / "you" | Any individual who has registered an account on sin77 or who accesses the Platform in any capacity. |
| "KYC Data" | Identity and age verification documents, including Indonesian National Identity Card (KTP), passport, and proof of address. |
| "Sensitive Data" | A subset of personal data that warrants heightened protection, including KYC documents, financial account details, and responsible gaming self-declaration information. |
| "Third-Party Processor" | An external organisation that processes personal data on sin77's behalf under a formal data processing agreement, including payment processors, game studios, and fraud prevention tools. |
sin77 collects the following categories of personal data:
| Category | Specific Data Points | Required? |
|---|---|---|
| Registration Data | Full name, email address, mobile phone number, date of birth, preferred currency (IDR), username, password (hashed). | Mandatory |
| KYC / Identity Data | Indonesian KTP or passport (document number, issue/expiry date, photograph), proof of address, selfie photograph for liveness check. | Mandatory for withdrawals |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history. | Mandatory for payments |
| Gaming Activity Data | Bet history, game session logs, deposit and withdrawal history, bonus claim records, win/loss records across all product verticals. | Automatic |
| Technical Data | IP address, device type and OS, browser type and version, session timestamps, geolocation data (city/region level). | Automatic |
| Communications Data | Live chat transcripts, email correspondence, in-app message history, support ticket records. | Where applicable |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, session time limit configurations, problem gambling self-declarations. | Where applicable |
sin77 collects personal data through the following channels:
sin77 processes personal data only where it has a valid legal basis to do so. The following table sets out the purpose, data categories used, and the legal basis for each processing activity:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration Data | Contract performance |
| Age and identity verification (KYC) | KYC / Identity Data | Legal obligation; contract performance |
| Processing deposits and withdrawals | Financial Data, Registration Data | Contract performance |
| Fraud prevention and anti-money laundering | Financial Data, Technical Data, KYC Data | Legal obligation; legitimate interest |
| Customer support | Communications Data, Registration Data | Contract performance; legitimate interest |
| Responsible gaming monitoring and intervention | Gaming Activity Data, Responsible Gaming Data | Legal obligation; legitimate interest |
| Platform security and abuse prevention | Technical Data, Gaming Activity Data | Legitimate interest |
| Personalised promotional offers (opted-in Members only) | Gaming Activity Data, Registration Data | Consent |
| Regulatory reporting and audit compliance | All categories, as required | Legal obligation |
sin77 does not sell, rent, or exchange personal data with third parties for commercial purposes. Personal data may be shared only in the following limited circumstances:
sin77 operates on infrastructure hosted across multiple geographic regions. As a result, your personal data may be processed on servers located outside Indonesia. Where data is transferred internationally, sin77 ensures adequate protection through:
If you have questions about the specific safeguards applied to your data in any jurisdiction, contact us at [email protected].
sin77 retains personal data for the periods set out below, after which it is permanently deleted or anonymised:
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account data | Duration of membership | Contract performance |
| KYC and identity documents | 5 years after account closure | Gaming licence compliance; AML regulations |
| Transaction and financial records | 5 years after account closure | Financial regulatory obligations |
| Customer support communications | 3 years after last interaction | Dispute resolution; quality assurance |
| Technical / access logs | 12 months | Security monitoring; fraud prevention |
| Responsible gaming records | 5 years after self-exclusion or account closure | Regulatory compliance; harm prevention |
| Marketing consent records | Until consent is withdrawn + 2 years | Proof of consent; legal protection |
sin77 implements a multi-layered security programme to protect personal data against unauthorised access, alteration, disclosure, or destruction. Key security controls in place include:
As a Member of sin77, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". sin77 will respond within 30 calendar days.
Request a copy of all personal data sin77 holds about you, along with information about how it is used.
Request correction of any inaccurate or incomplete personal data held in your Account record.
Request deletion of your personal data where sin77 no longer has a legal basis to retain it. Note: regulatory retention obligations may limit full erasure for certain data categories.
Request that sin77 temporarily cease processing your data while a rectification or objection request is evaluated.
Request a machine-readable export of the personal data you have provided to sin77 in a structured, commonly used format (CSV or JSON).
Object to processing of your data where sin77 relies on legitimate interest as its legal basis, including profiling for personalised promotions.
sin77 uses a limited set of cookies and browser session storage to provide core Platform functionality. We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session Cookie | Maintains your logged-in state during a single browsing session. Deleted when you close your browser. | Session only |
| Authentication Token | Enables "Remember Me" login functionality. Encrypted and tied to your specific device. | 30 days |
| Preference Cookie | Stores non-personal user preferences such as language display and notification settings. | 1 year |
| Security Cookie | CSRF token to protect form submissions from cross-site request forgery attacks. | Session only |
| Analytics (First-party) | Anonymised page view and navigation data to improve Platform usability. No personal identifiers stored. | 90 days |
You may disable cookies through your browser settings. Note that disabling session and authentication cookies will prevent you from logging in to your Account.
Where sin77 discovers or is notified that a Member is under 21 years of age, the following actions will be taken immediately:
If you believe a minor has accessed sin77 using your device or payment details, contact [email protected] immediately. We will investigate and respond within 24 hours.
sin77 collects and monitors gaming activity data as part of its responsible gaming programme. This monitoring is carried out in sin77's legitimate interest and legal obligation to prevent gambling-related harm. Specifically, sin77 may:
Responsible gaming data is treated with the highest confidentiality. It is never used for marketing or commercial profiling. For more information on the tools available to you, visit our Responsible Gaming page.
sin77 reviews this Privacy Policy at least annually and may update it at any time to reflect changes in applicable law, gaming licence requirements, or the way in which we process personal data. Material changes — defined as changes that affect what data is collected, how it is used, or with whom it is shared — will be notified to Members by email at least 14 days before taking effect.
Minor editorial changes (including clarifications, formatting corrections, and updated contact details) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the most recent revision.
Continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with any changes, you must close your Account before the effective date by contacting our support team.
For questions about this Privacy Policy, to exercise any of your data rights, or to raise a privacy concern or complaint, please contact the sin77 Data Protection team:
sin77 will acknowledge all privacy enquiries within 3 business days and provide a full response within 30 calendar days of receiving a complete request. Where a request is complex or involves a high volume of data, the response period may be extended by a further 30 days, and you will be informed of this extension within the initial 30-day window.
If you are not satisfied with sin77's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances.
Our support team handles all data rights requests. You can also review our full Terms & Conditions or browse the FAQ for quick answers.