Privacy Policy

1. Introduction

mt77 operates the online betting and gaming platform accessible at mt77.cam. In the course of providing our services to users based primarily in Indonesia and other permitted jurisdictions, we necessarily collect and process personal information. We take this responsibility seriously and are committed to handling your data transparently, securely, and in accordance with applicable data protection standards.

This Privacy Policy describes our practices in relation to the collection, use, storage, sharing, and protection of personal data. It also sets out the rights you have in relation to your data and explains how you can exercise those rights. We encourage you to read this document carefully and to contact us at [email protected] if you have any questions.

This policy is effective as of 1 January 2026. We may update it periodically to reflect changes in our practices, technology, legal requirements, or business operations. The most current version will always be available at mt77.cam/privacy-policy with the revision date displayed at the top of the page.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. Examples include your full name, email address, Indonesian National ID (KTP) number, phone number, IP address, and banking details.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, alteration, restriction, or deletion.
• "Data Controller" — mt77, which determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" — a third party that processes personal data on mt77's behalf and under its documented instructions (e.g., payment gateway providers, KYC verification vendors, hosting providers).
• "User" / "you" / "your" — any individual who accesses, registers on, or uses the mt77 Platform.
• "Account" — a registered user profile on the mt77 Platform.
• "Sensitive Data" — a subset of personal data warranting heightened protection, including copies of government-issued identity documents (KTP), financial account details, and information about problem gambling support requests.

3. Data We Collect

The categories of personal data we collect depend on how you interact with the mt77 Platform. The table below summarizes the main categories:

We do not collect special categories of sensitive personal data beyond those required for identity verification and responsible gaming purposes (e.g., self-exclusion requests and problem gambling support records, which are treated with the highest level of confidentiality).

4. How We Collect Your Data

mt77 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when registering an Account, completing KYC verification, making a deposit or withdrawal request, submitting a support ticket, or responding to a promotional offer. This includes all information entered into forms on the Platform.

4.2 Automated Collection

Data collected automatically when you access the Platform, including technical information about your device and connection (IP address, browser type, device identifiers) and behavioral data about your activity on the site (pages visited, bets placed, games played, session duration). This data is collected via server logs, cookies, and similar tracking technologies described further in Section 10.

4.3 Third-Party Sources

Data received from third-party service providers who assist with our operations, including:

• KYC Verification Vendors: Identity verification results and fraud-screening signals from third-party KYC providers who cross-reference your submitted documents against public records and watchlists;
• Payment Processors: Transaction confirmation data from Indonesian bank transfer networks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja);
• Anti-Fraud Services: Device fingerprinting and fraud risk scores from third-party security vendors;
• Analytics Providers: Aggregated, anonymized website usage statistics from analytics platforms.

5. Purpose & Legal Basis for Processing

mt77 processes your personal data only for specified, legitimate purposes. For each processing activity, we rely on one or more of the following legal bases: contractual necessity (processing required to perform the services you have requested); compliance with a legal obligation; legitimate interests (where our interests are not overridden by your data protection rights); or your explicit consent where required.

Where we rely on consent as our legal basis (e.g., for marketing emails), you have the right to withdraw that consent at any time by contacting us at [email protected] or using the unsubscribe link in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

6. Sharing Your Personal Data

mt77 does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

6.1 Service Providers (Data Processors)

Third-party companies that process data on our behalf and under our instructions, including hosting providers, KYC verification vendors, payment gateway operators, customer support software providers, and analytics platforms. All processors are bound by data processing agreements obligating them to apply data protection standards equivalent to those described in this policy.

6.2 Payment Partners

Indonesian payment providers — including bank transfer networks for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon, and e-wallet operators for OVO, DANA, GoPay, ShopeePay, and LinkAja — receive transaction information necessary to process your deposit and withdrawal requests. These providers operate under their own privacy policies, which we recommend you review.

6.3 Regulatory and Law Enforcement Authorities

We may be required to disclose personal data to regulators, licensing authorities, law enforcement agencies, or courts when legally compelled to do so, or where disclosure is necessary to comply with our anti-money laundering or counter-terrorism financing obligations. We will notify you of any such disclosure unless prohibited from doing so by law.

6.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of mt77's assets, personal data may be transferred to the acquirer or successor entity as part of the transaction. We will notify registered users by email before personal data is transferred and becomes subject to a different privacy policy.

7. International Data Transfers

mt77 operates infrastructure distributed across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Indonesia, including the jurisdiction in which mt77 holds its international gaming license and countries where our cloud hosting and KYC verification vendors operate.

Where personal data is transferred outside Indonesia to countries that do not have equivalent data protection laws, mt77 implements appropriate safeguards including contractual data protection clauses with service providers, encryption of data in transit and at rest, access controls limiting data access to authorized personnel only , and periodic security assessments of third-party processors.

By using the mt77 Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described above.

8. Data Retention

mt77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to any identifiable individual. Anonymized data may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

mt77 employs a layered security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational measures include:

• Encryption in Transit: All data exchanged between your browser and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). Payment-related data uses additional end-to-end encryption layers.
• Encryption at Rest: Sensitive personal data — including KTP copies, bank account numbers, and identity verification records — is encrypted at rest using AES-256 encryption in our database infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is role-based, logged, and subject to periodic access reviews. Multi-factor authentication is mandatory for all staff with access to production systems.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services. Regular penetration testing is conducted by independent security specialists.
• Fraud Monitoring: Automated systems continuously monitor account activity for unusual patterns indicative of unauthorized access, account takeover attempts, or financial fraud.
• Staff Training: All mt77 personnel with access to personal data undergo mandatory data protection and security awareness training upon onboarding and annually thereafter.

While we implement robust security measures, no system is completely immune to security risks. You play an important role in protecting your own data by maintaining the confidentiality of your Account password and notifying us immediately at [email protected] if you suspect any unauthorized access to your Account.

10. Cookies & Tracking Technologies

mt77 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device by your browser at the request of the website you are visiting.

10.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that help protect your Account. Essential cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred odds format, and display options to provide a more personalized experience.
• Analytical Cookies: Collect anonymized information about how users navigate the Platform — which pages are visited most, where users drop off, and how features are used — to help us improve the site. We use privacy-respecting analytics tools that do not share your data with advertising networks.
• Security and Fraud Prevention Cookies: Support our fraud detection systems by identifying unusual device behavior or session patterns that may indicate account takeover attempts or bot activity.

10.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are set. Please be aware that disabling certain cookies may affect the functionality of the mt77 Platform, including your ability to stay logged in or save your preferences.

mt77 does not use cookies for targeted advertising or for tracking your activity across third-party websites beyond what is necessary for fraud prevention and security purposes.

11. Your Privacy Rights

Regardless of your location, mt77 recognizes and upholds the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include sufficient information for us to verify your identity before processing the request.

We will respond to verified data rights requests within 14 business days of receipt. In complex cases, we may extend this period by a further 14 business days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

12. Minors & Age Restriction

mt77 strictly prohibits access to its services by persons under the age of 21. We do not knowingly collect personal data from individuals under 21. If we become aware that an Account has been created by or on behalf of a person under 21, we will immediately close that Account, delete all associated personal data to the extent permitted by our legal retention obligations, and — where required by our anti-money laundering obligations — report the matter to relevant authorities.

If you are a parent or guardian and believe that your child under the age of 21 has registered an Account or provided personal data to mt77, please contact us immediately at [email protected]. We will take prompt action to investigate and remediate the situation.

We strongly encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. Our Responsible Gaming page contains further guidance on preventing underage gambling.

13. Third-Party Services & Links

The mt77 Platform may contain references to third-party payment providers, game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft), and sports data providers. These third parties operate their own systems and privacy practices, and mt77 does not control or accept responsibility for their data handling. We encourage you to review the privacy policies of any third-party service providers whose services you access in connection with your use of mt77.

mt77 does not embed third-party advertising scripts or social media tracking pixels that would allow external parties to profile your behavior across the web. All analytics and tracking tools used on the Platform are configured to respect user privacy and are not shared with advertising networks for targeting purposes.

14. Policy Amendments

mt77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. Material changes — those that significantly affect your rights or the way we use your personal data — will be communicated to registered users by email to the address on file no less than 14 days before the change takes effect.

For non-material changes (such as clarifications of existing practices, corrections of typographical errors, or updates to contact details), we will update the "Last Updated" date at the top of this page and may, at our discretion, post a brief notice on the Platform.

Your continued use of the mt77 Platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change, you should stop using the Platform and request Account closure before the effective date of the change.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about the way mt77 handles your personal data, please contact our Data Protection team through the following channel:

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to the licensing authority overseeing mt77's international gaming license. We will cooperate fully with any regulatory investigation into our data protection practices.

For responsible gaming-related data requests — such as retrieving your betting history or understanding how your behavioral data is used in our responsible gaming monitoring systems — please clearly indicate this in your request and it will be routed to our dedicated responsible gaming team.